You should have just locked the iPad in Find My Phone so if someone ever connected it to Wi-Fi, it would automatically lock and it would be useless to them. Not sure how that would work after changing the iCloud password.
Yes, if someone restores the iPad, they'll need to put your Apple ID and password on.
Also, that story was not funny. That sucks. :/