2-factor authentificaion for parents and staff...if unable to provide that, have an option for admin to turn-off email/password sign-in and require users to sign-in with their google account/email so that schools can maintain 2-factor security through their email domain.