I recognize this post is old. But I think the issue is still pretty much alive and I hope I don't sound like trying to beat a dead horse... I also hope Jenny found the answer. After all, after 3 years, her kid has probably grown up and hopefully she won't need to resort to this locking mechanism to control the device(s).
With that said, I would like to chime in, just in case there are new comers (like I am) who want an answer.
I am from both worlds: iOS and Android, currently having control over 9 Galaxy devices and 2 Apple products, also a parent of children who 'naturally' attach to electronics, after looking high and low, left and right for quite some time, I can say this:
1. Google and Apple approach this issue the same way: They have Find My Device and Find My iPhone services respectively, they allow remotely locking their devices using the EXISTING secret key on the device. I don't want to debate the usefulness of this approach or the logic behind it, except to say that it doesn't suite my need, since anyone who knows the secret key can enter the devices again, thus defeating the remote lock feature.
2. Samsung, on the other hand, for their Galaxy devices, provides a service called Find My Mobile, this service does almost the same things as the other two above, but it also allows you to lock the device with a new key. So, you can literally repeatedly lock the device with a different key each time. I find it useful because the kids can have their own key, their key won't be overwritten or deleted, but once I lock the device, the new key I enter will take priority. The kids can't get back into their devices until either I manually unlock using the new key (thus keeping the key secret), or (this is the part that makes Samsung's Find My Mobile service useful) I remotely lock again with a known key i.e. 0000, then I can tell the kids to log in using the known key. This way, when I don't want anyone to use the devices, I lock them with a secret key only known by me. When I want someone to use the devices, I lock them with a key known by us. The entire time, the kids' own secret keys remain intact, just they the new secret key I enter takes priority. I really like this public/private key approach from Samsung.
One more thing: Both Samsung's FMM and Google's FMD services are easy to use on the web. Google has its own app to make it even easier. Apple, on the other hand, offers a lot of features once you log on the icloud account, but the FMiP page isn't mobile-friendly: to get to the Lost Mode, you have to click on the tiny green dot representing the device in question on the map, then try to click again on the equally tiny exclamation mark ⚠ to bring up a small popup to Ring, Lock (Lost Mode), and Erase the device. It is very difficult to click on these small icons on a phone screen. On computer this is fine, no problem. This FMiP is tailored for computer use, I can see that, but it kind of makes the service more difficult to use than its rivals'. (I could be wrong, since I only try Apple's FMiP on Chrome and Samsung's browser, Apple's Safari might behave better, I am not sure)
Sorry for the long post and it now sounds like I am giving a review of services from the major tech companies, but I thought I would want to be clear and thorough.
Thanks and please share your thoughts on this.