I did not expect that ending.
Just think of a Network Administrator doing this every time there was a root login attempt that failed. They'd get a lot of exercise these days, that's for sure.
This reminds me how my first unix account at college was locked by sysadmins during the first day. I only knew "cd" and "ls" at the time... :)
Every time someone tried to su the IT staff would show up and ask them what exactly they thought they were up to. That went a long way to instilling the idea that you shouldn't mess about doing things you shouldn't on communal hardware.
Also the case at University of Birmingham. Must be a default somewhere