Additionally, you should set a firmware / BIOS password on your MacBook, cant remember the "official" name for it but its the password that you set from the OS utilities menu during safe boot.
Here, this;
https://support.apple.com/en-us/HT204455
Its not going to help you recover the Mac per se, but its gonna help prevent the Mac being used by a thief by preventing them from wiping the OS on the internal storage. Even Apple themselves can't (wont?) remove this password and it essentially locks out any subsequent "owners" of the device from making system-level changes. Combine this with FileVault encryption, a user-account password, and being logged into an Apple account in your user so that Find My Mac works, and I think thats about the best you can do. Definitely keep all your personal data backed up (local storage volumes, Time Machine, Backblaze, etc.), treat all data on your portable devices like MacBook's as "disposable", so in the event of losing your device its not terrible painful to get a new device and start again.