The late 2009 iMac can be upgraded to 10.13.
All OSes on the Mac support an open firmware password that can only be bypassed by knowing the password you inserted.
Secondly Apple menu -> System Preferences -> Security can encrypt the hard drive via Filevault.
Recovery is only available with 10.7 or later being installed, and the hard drive remaining healthy on a 2009 machine. If you still have the original CD that came with the machine, you can boot it with the Option key to manage the Open firmware password as well. If the hard drive fails, you may not be able to fix the issues with open firmware on such an old machine that has been updated past that CD's ability to manage it.
If this is not the security you are looking for, what do you mean by forcedentry?