Make of it what you will, I just saw on the project censored website that protecting student data is seen by some as a major priority. The article seems more PII and cybersecurity focussed, rather than recognizing the threat of intentional monetization.

https://www.projectcensored.org/ferpa-and-higher-ed-should-p...