Try anonymously mailing these same security issues and your suggested solutions, and the fact that you emailed them months ago to the local campus (or town) newspaper. You might include the nasty response the Admin sent you. Nothing spurs an institution to action faster than bad press.