This is about digital security, i.e. protecting data from unauthorized access and use. It says nothing about protecting students themselves from surveillance and abuse by their own institutions.