Make of it what you will, I just saw on the project censored website that protecting student data is seen by some as a major priority. The article seems more PII and cybersecurity focussed, rather than recognizing the threat of intentional monetization.
This is about digital security, i.e. protecting data from unauthorized access and use. It says nothing about protecting students themselves from surveillance and abuse by their own institutions.