Anyone with any sort of IT experience would have told him doing what he did was probably the worst course of action he could have taken and only prevents helpful white hat disclosures and encourages black hat attacks. And of course, he was in charge of the department that administered the website, so he was ultimately at fault.
https://krebsonsecurity.com/2022/02/report-missouri-governors-office-responsible-for-teacher-data-leak/