Well yes, it can be leveraged. But one needs to be careful about it.
You can't just go talking about it or sending official letters to the administration or the IT department. Personally should I want to disclose something like this I would first approach a maverick amongst faculty staff to test the waters. After consultation with a person with good knowledge of the local political landscape I would discretely relay my knowledge.
But it is still risky and leaving no evidence is still a safe bet.
I've seen scholarships handed out over this. But you never hear about those, because nobody's angry.
Hiding responsible disclosure just means you aren't responsible.