Android has enough theft protection features, but this missing setup step can undo all of them