

They are given due process, including access to lawyers, evidence, and witnesses. They’re even allowed to take the case to court. All public universities are required to offer full due process when expelling students.
Private universities are not required to do so because they’re not run by the government.




We use Copilot to review PRs at work. It loves these kinds of scenarios.
The other day, I was adjusting a drop-down site filter to only show options that would work for the given user. It threw up a “critical vulnerability alert” complaining that I “validated” the user’s selection based on all options, not just the ones they can view.
First off, it wasn’t validation. It was me getting the value of the option. Second, they literally couldn’t do anything if they did select one of those options. And third, the user could bypass it about a dozen other ways, even if I designed it to be a validator.