Best way to protect mac mini log in

I need either a Mac mini or a MacBook Air at a remote location where I remote into Windows PC’s. I need it so I can use sidecar for my iPad when getting near some equipment to make adjustments on said equipment.

The Mac Mini is much less money. But it is much easier to take the MBA home and remove the theft possibility. Low likelihood of theft, but since I need to log into my iCloud account to use sidecar, I need the safest way to protect my iCloud account if the Mac mini is stolen. The mini is replaceable. The problem arises because I must log into my iCloud account to use sidecar.

I am leaning towards the Mac Mini so it can be left there.

I use a strong password, but can two factor authentication or a usb key be used for both the first login and then to login to iCloud as well to the mac mini? I do have one of each now, but will get one for this remote setup.