Typical response really
Its just a normal response from a school with egg on its face. At least now the student is well aware that anything to do with security should never ever be mentioned to those charged with maintaining that security. (no thats not sarcasm thats really what you should avoid doing if you dont wanna end up like this poor kid)
I recall been excluded from the final week at my high school simply for casually mentioning to another tech friend while in a computer room how easy it would be to plant a virus of almost any kind up the schools system due their lack of any comprehensive A/V and the very lax security measures that would allow it to roam freely. Shame a teacher overheard me and thought I was planning on doing exactly that. Not even the protests of the IT staff (who all knew me and knew I wouldnt bother wasting my time doing that, theres no point or reward to it) could convince the school Admin I wasnt a nasty terrorist hacker. Oh well you live and learn, at least it was long enough ago that people didnt think about calling the police for everything thing.