Lock for MB Air & Finder Q.s

[haremite]

I decided to buy a MBA 13 inch 256GB SSD for my son, who is going away to college in 2 weeks (yay, for him, and yay, for me for a future clean bathroom!).

I'd like to know:

What kind of lock or device can I buy for him to attach it to his dorm desk or something so it doesn't get stolen? I've looked at a few cord locks online, but it seems they aren't very efficient.

Also, the whole "track my Apple device" thing, which he has on his iPhone 8, can you do that with the 2017 MBA, and how do you track it if it's turned off? Not possible, right? Same with any Mac device, right?

Thanks.

 

[Audit13]

Can't really prevent someone from using a stolen Macbook air. You can use an efi password but these can still be removed by a competent apple tech: https://support.apple.com/en-ca/HT204455

It is easy to turn off any iCloud tracking on a MacBook Air too.