You technically don't even need to call or anything. If the phone is locked and your pin code isn't something easy to guess, they won't get in. Reporting the phone as lost to the carrier only prevents it from being used on some carriers that share the same database on the off chance you somehow release the phone from your iCloud's activation lock.