Chromebooks provide separate logins for personal and Workspace/GSuite accounts.
As for what happens if your Chromebook is stolen and you've not selected the option to lock it when the lid is closed, Workspace/GSuite accounts can be remote wiped, personal ones cannot. Perhaps with the upcoming Workspace Individual plan, remote wiping of personal accounts will be possible too.
Password managers such as 1Password and Bitwarden can save and fill in TOTP codes. Maybe not perfect security but a big win for convenience and loss prevention.
In five years of running a Chromebook dev mode, I've never had that happen but just in case Crouton has a backup feature to save a gzip of your chroot onto a SD card etc.
Sub $200 Chromebooks with decent keyboards: Dell 11 (2014 & 2015 models), Asus C202SA, and maybe the Lenovo educational models. At higher prices, of course, you have many choices: both Pixels, Lenovo and HP 13" and the Acer 14 for Work (all last year), the new Asus C302SA.
You might want to indicate somewhere that this is for Windows only. I downloaded the source on my Linux machine and took a while figuring out that it's a MS Visual Studio project.
Well the Pixel of course, but the Levovo Chromebook Yoga 11e is widely said to have the next best keyboard and I haven't heard any complaints about the touchpad. It runs around $450 US so pricier than most.