I don't give a shit about what work gives me saying all I'm doing is work on that thing. Now what I'm really afraid of is Microsoft pulling data from the sensors on the device when I'm working from home with it. I need too think of a way to deal with it (I do not have a separate room for work)
Get a domain against XMR from Njalla/NiceVPS/IncogNET.
Purchase a VPS with XMR.
Host website on it along with a WAF, Fail2ban, and maybe Cloudflare free account if you're OK with that (there are ways to not use Cloudflare but they're a bit more advanced).
Host it over the clearnet, TOR, I2P and FreeNET for universal access.
Somebody teach the kids to pentest: get into their REST API and ring it for every desk this stupid sensor is placed in. If you're better than average, get into the operations of the electric controller which these sensors are powered through and fry them. Cost the school millions and they'll (maybe) come to their senses
That is brilliant, I really wish they do it ASAP