Correct me if I am wrong, Google has service to erase everything on phone remotely, but after that person would be able to use the phone completely wiped? Also if you have password set and dont erase anything, a person still cannot access anything unless he wipes the phone?
https://www.google.com/android/find