>What is the better solution that retains the anti-theft capabilities of the device?

I have a private key, not on the device, that matches a public key on the device. The device will not perform certain significant operations without a signature from my private key.

C'mon people, this is not rocket science.