I understand the situation here. Many of my friends ask to borrow my RP3 for the weekend or so.
My setup has been done manually, I added tons of Japanese game collections, painstakingly selected the correct artwork, videos, etc so I wouldn't like anyone to copy and sell my "work".
Since physical access to the microSD card can easily gain them root access or plain image copy, after backing up my (final-ish) setup and ensuring that my root and user password are unique, I used epoxy.
Yup, that two part glue that will never, ever come out without complete destruction of the card or the board itself.
Use epoxy carefully in order to avoid ruining your hardware (avoid connectors) and realise that you're shortening the particular Pi's life to a microSD's read/write cycles. It will definitely die before the rest of the hardware.
But at this price it's virtually expendable anyway, isn't it? :)