the software the teachers end up using for main instruction is most likely chosen by administrators and/or the district, it may or may not have been individual to the school (like some schools were probably just told "you're gonna use this, figure it out"). they SHOULD do testing, but whether they did or not varies, and unfortunately there are some things that you're not going to figure out will go wrong until they do (like with random people getting on your Zoom calls). there hasn't really ever been this volume of people using these programs, and so they weren't on the radar of the public at large, so it was only after they were already rolled out that more and more people started figuring out how to fuck with it.
IT is also gonna vary by place, some schools might have dedicated staff but others are gonna have a handful of people that work for the district and get sent where they need to go.
but again, this is talking about the regular software and not the random shit teachers are coming up with on their own (like Strava) which I think would easily be shown to be a problem to anyone who's spent any time on the internet. I think the problem THERE is that teachers are trying to get creative on their own and not running those ideas through the appropriate channels. in your actual physical classroom, you wouldn't have to think to ask like, oh I'm gonna change up this lesson plan a bit and do something else, or I usually do multiple choice but I'm gonna add some short responses as well, but when you start adding in changes like THIS, where there ARE security concerns, they're being naive dopes about it and they're probably equally as cavalier about their own online presence.