If they can’t do basic, physical security correctly, it kind of calls into question their broader approach? For example, I imagine it’s much easier to socially engineer yourself into other access once your inside the campus than from without.