VNC over SSH tunneling always worked well for me before I had Apple Remote Desktop available, though I don't recall if I ever initiated a connection attempt from anything other than macOS...
erase-install can be run non-interactively when the correct arguments are used. I've only ever used it with an MDM in play so YMMV:
The first season of True Detective is amazing TV for many reasons, but the scene I'll never forget involves a tense moment when suddenly the first gunshot goes off inside a small cottage and all hell breaks loose.
Instead of a silly overacted action sequence where the hero darts around killing everyone with miraculous hip-fired headshots, instead you hear a sudden jarring crack-FWOOMP followed by an intensely loud tinnitus ringing. It takes half the scene for the ringing to slowly clear while the hero somewhat realistically tries to escape without harming anyone or blowing his cover, while also staying out of the line of fire.
It was so against the norm for action sequences that it nearly broke the immersion for me until it settled in how well put together that scene was.
Sounds a lot like this bit from Kill Process by William Hertling:
"The little computers run a secure variant of Linux, with a single open port, protected with heavy encryption. Part of the computer board contains a sensitive accelerometer, which means I can detect when the computer is moved.
When I travel, I find coffee shops and homes with wi-fi signals and flat roofs, and I toss one of these onto the roof.
If you were to find one, pick it up, and look at it, you might not be sure what it was. If you plug a headphone into the jack, it plays pirate music stations.
Of course, that’s what it does only if it’s been moved or if the battery level drops too low. Because when the accelerometer detects motion, the code I wrote replaces my extensive software with a simple dummy music app and erases the remaining storage a hundred times over.
If it hasn’t been moved, and the battery level has never dropped too low, then it does what it’s supposed to do: operate as part of my private onion routing network with hundreds of nodes to disguise my digital trail so others can’t trace my location.”
erase-install can be run non-interactively when the correct arguments are used. I've only ever used it with an MDM in play so YMMV:
https://github.com/grahampugh/erase-install