I have mixed feelings on this. On the one hand this is incredibly screwed up, on the other hand this kind of surveillance isn’t new in the corporate world and there really shouldn’t be an expectation of privacy on devices issued by a school, company, or anyone other than yourself. I know I would never trust a device that isn’t mine. That doesn’t remotely make it ok to do, I’m just not sure anyone will do anything about this.