If, on the other hand, I don't find out about it, and you get hacked, then any damage, cleanup, or repairs to machines within your lab becomes your responsibility. Even so, I've met with them several times to ensure that the security on that server met departmental guidelines. Those meetings, and the accompanying work, took up several hours of my time. The exception was made after much discussion, and was done because the lab had some very special configuration needs for research purposes. This hacker hit one of the machines in Psychology, not a web server, but a private lab machine which I did not have access to.
Hackers are no joke.
They cause real damage, and lots of it. They are getting more and more sophisticated, and trust me, they know every hole in the wall better than many sysadmins. I really appreciate your cooperation in making the Psychology network as safe and as secure against intruders as possible, even though many times the process of making it safe is a bit unpleasant.