It’s a shame someone named Arthur Pigou never figured out a solution over a century ago.

Oh wait

It’s a whitelist. Only phone numbers you explicitly allow can send commands. Alternatively, you can choose to enable a pin that must be given in order to execute commands.

It’s amazing what you can do when you aren’t accountable to shareholders

FindMyDevice. Alternative to Google’s find my device. You send a text from a different phone number, and you can do things like get the GPS location, lock the device, erase the device, ring the device, or have the device take a picture of its location.