However, if something goes wrong, and they do the wrong thing, we want to be able to send out some kind of command or similar, that will completely lock, block, or wipe the sensitive data.
You're assuming you'll have a network connection and that sensitive data is all in the same place.
Short of remotely unlocking an encrypted disk on every single boot... and even then...
What kind of game?