Some of the pain in this specific example case seems to be haven gotten into a state where both iPads and Chromebooks are regularly used side by side in the classroom. They are using Google Workspace accounts with a custom SSO "app" on an iPad presumably so that everything is synchronized with Chromebooks, too.