Do you hold any student data? Personally identifiable information? Is any of it in those user devices? If the answer to any of that is yes, then the resource and effort is immaterial next to the consequences of data loss, especially when the media identifies how the tech was managed.

Not wishing to fearmonger, but it's a real risk. I used to run IT in tertiary sector, if anything mentioned above gives you more than a mild tingle in any internal organ, then you should do the work now to protect yourself later (and I mean yourself.... it's easier to blame a breach on IT rather than the leadership or culture).