University administrators tend to be extremely risk-adverse – largely because they have to run institutions whose values have become incoherent. They don’t want to look bad by enforcing their own rules. What they don’t understand is how bad they look by not enforcing them.