>Having a lawyer send a letter isn't an automatic win. Once you turn it into a legal threat you force them to escalate to their legal team

Sure. But I'd love to see what a legal defense would say to this situation of soft-expelling a student who was making use of a school provided API. then potentially extorting him with his graduation as leverage.