I went ahead and set the default inactivity to 600 minutes. That means I wouldn’t have to log in multiple times but if it got stolen, I would think it would take that long for them to break into much computer. And thus my next question about 2 factor authentication on a Mac when logging in!