If you accompany the software with devicelock autolock which doesn't reset on re-flash, then you're just fine. Or is the point having the phone on, so you can locate it instead of securing the data and as a bonus retrieving it if the thief is stupid?