I disagree myself.

Anti-theft measures are better handled by IMEI blacklisting.

A device lock that can be disabled by a reflash, then read out and brute forced, is not really a device lock. All it does is delay the inevitable.

My vote would be for a theft sticky advising people to go to their local government communications bureau to submit their IMEI rather than make a big deal about device locks that are really only designed to prevent access to the rootfs until reflash.

That's just me though. I'll happily type out how to do it if I see someone ask, no matter the post count : )