In your judgement how common do you feel this exploit would be across other university IDs in the country, or just IDs in general? Did your research uncover any data in that regard one way or the other?
I'm just remembering my ID card...and my sister's...and my brother's. We used those for literally everything.