I don't think so. If the school is forced to store their records outside in a cardboard box should they be liable when it is stolen? Because that's what we are

I don't think so. If the school is forced to store their records outside in a cardboard box should they be liable when it is stolen? Because that's what we are essentially doing by under funding, under training, and not even providing secure software to begin with.