I wasn't trying to be dreary so much as point out that entire school districts simply don't care about security one bit, even after being pwned.

There's no incentive for one to give a damn, and we can't rely on good IT to be present in any given organization.