How do they justify this when the keys may be locking doors that for example protect extremely sensitive personal information? Like for example financial information for support or allegations of misconduct or criminal activity? Don’t they have a legal obligation to protect these things?
The locks for rooms that had extremely sensitive information, personal or otherwise, did not use the same master as was available to students, and used a different brand of lock that was more resistant to lockpicking. And, perhaps more important in practice than the actual resistance to lockpicking, the brand was widely understood as a signal that picking the lock was not acceptable. Presumably, they also had electronic security.
Also, whatever you assume, there are legal and moral obligations to protect information in any case.
You had most older buildings on one brand of ordinary locks with a master system, and the newer buildings with better ordinary locks on a different master system, and then a few rooms with Medico high security locks.
My recollection is that that was strictly correct but that the scope of acceptable justifications (ca. 1990) was broad enough that that was all but a formality.
When I was there (late 70s, early 80s) the best masters were actually not official masters. The best were Whitehead masters, made by a student named John Whitehead. He hand filed a master with intentional deviations from ideal designed so that when you copied it, the copying errors would make it closer to ideal. Whitehead masters were copies of that hand filed key.
Several people from campus security used Whitehead masters instead of their official masters because the Whitehead ones worked better.
I had an accidental master for a while. My room key happened to function as a master when inserted halfway. I don't remember how I discovered that. I'm assuming that they have long since changed the lock systems, but on the off chance they have not, it was room 21 of Ricketts.