Comment Former school IT guy here... (Score 1) 56
If a school gets pwned by a student, that's the school's fault. Not even necessarily the IT team's fault; if teachers leave their login details lying around that's not on the IT team, that's a failure to follow IT policy. If your IT policy doesn't say "don't leave your password lying around" then that probably is the IT team's fault - unless they couldn't get leadership buy-in, which is definitely possible. Some places treat teachers like royalty and such cruel restrictions would simply be beyond the pale... if you work at such a place, I feel your pain.
Of course, I'm not saying the little scrotes should be trying to hack their school but if they can do it then literally anyone can do it, and that is the problem.