Hi,
I hope I understand you well.
When the device is secured then you are not able to neither load the code into it

nor connect to it and the CW reports it before download.
When the mcu is secured then you can see after download:

The only BDM command which is accessible is mass errase which is able to clear entire memory and set the security bits to the unsecure status. Unsecuring can be performed by CW or external program.
So easily, if you are able to connect to it by BDM before loading the code or hot plugin then it is not secured.
Have you tried to secure the device and then to connect to it? You will see what happens.
If you want to secure the device then just add following on the top of your code as a global variable:
const unsigned char flash_array[] @ 0xFFFE08 = // secure the device without backdoor key
{
0xFF, //0xFFF08
0xFF, //0xFFF09
0xFF, //0xFFF0A RESERVED
0xFF, //0xFFF0B RESERVED
0xFF, //0xFFF0C FPROT
0xFF, //0xFFF0D DFPROT
0xFF, //0xFFF0E FOPT
0xFC, //0xFFF0F FSEC - SECURED without backdoor key
};
Best regards,
Ladislav