Best Option Period. (Score 1)

IBM thinkpads offer a baseboard security chip. I have a ThinkPad X60s and you need a finger print to boot it. The baseboard module is tied to the bios and you have to replace the baseboard module and re-flash the bios if you lose the fingerprint or password. No amount of pulling the internal battery will help. To get a new baseboard module you have to have proof of ownership. So get a laptop with built-in security chip and pay for insurance against theft. The security chip also offers hardware level encryption for files and even the entire hard drive if you choose that option. Even if the theifs had access to baseboard modules without proof of ownership they would still have to shell out a hundred bucks or so and that's usually more than a stolen laptop is worth to them in the first place.