If a school provides a device to a student to take home there’s two possible outcomes.
They provide a managed device, and with any management tool, there’s a way to invade privacy, intended or not.
They provide an unmanaged device and get sued by parents for letting their"innocent snowflake" access unwanted content.
In both instances there’s something to legitimately complain about, but I still say the first option is the better one. The problem comes with oversight and auditing on the use of those management tools.
Not to mention that even with the second option of unmanaged devices, invasion of privacy can still occur if students are stupid enough to use the school provided accounts (Google, 365,etc)