You can only have policies that are hostile to your customers for so long until you lose business. You are not Apple where you can brainwash your customers into thinking they are the problem instead of your product (and even that approach does not last forever). There are too many to list, but one is making it impossible for someone to have multiple accounts tied to the same email address (e.g. larger organizations) and rolling this out during the summer where those who can help at the school level are out for the summer. There are far better ways to handle security without creating more work for yourself and others. NWEA has initiated its demise. Time to grab some popcorn and watch it burn.