I wonder if university networks are properly secured against external attacks. Universities produce valuable research and IP (eg, early vaccination experiments

I wonder if university networks are properly secured against external attacks. Universities produce valuable research and IP (eg, early vaccination experiments or know-how) that might be of interest to foreign (or even domestic) actors. In my school, we could SSH from Internet using password. So one compromised password could provide entrance into network.