My high school friend was threatened with expulsion and legal action for telling the school administration about the gaping security holes in their grade and at

My high school friend was threatened with expulsion and legal action for telling the school administration about the gaping security holes in their grade and attendance systems, which he probed (with permission from a teacher) but never exploited. He offered that he could publicly announce his findings instead, and they told him they would let him off with a warning as long as he didn’t tell anyone. Then they did nothing about the vulnerabilities.