the ethics committee of the university is supposed to have control of the ethics of its researchers. remember when a research group tried to backdoor the Linux kernel with poisoned patches? it's absolutely correct to raise hell with the university so they give a more forceful reprimand.