Don Corleone: “I’m gonna make him an offer he can’t refuse.”
In "The Godfather," Johnny Fontane wants a film role the producer has denied him. Don Corleone promises to change the answer. The scene captures a familiar exercise of power: Someone else establishes the terms, then leaves you to bear the consequences of refusal. The appearance of choice survives even as the freedom to exercise it all but disappears.
On Tuesday, Google announced new controls for K–12 student accounts. Google Search and several AI products will be off by default until administrators enable them. Schools may restore Search without separately turning on Gemini, but they cannot restore Google Search without its built-in AI features. A district that rejects those features must find another search service. Google presents this as greater control for educators. The controls are real. So is the condition attached to one of the most familiar tools in education.
Search has become almost automatic in teaching and learning. Schools can choose another provider, but established accounts, assignments, and classroom routines do not migrate by themselves. Google has determined which combination of services is available, leaving schools to absorb the consequences of rejecting it. The institution retains the authority to make a decision within boundaries it did not establish.
What K–12 Reveals About Higher Education
Google's decision concerns K–12 education, but higher education leaders would be mistaken to regard it as someone else's problem. K–12 has long served as a testing ground for educational policies, technologies, and practices that eventually influence higher education. Students carry their technological habits and expectations into college, while policy approaches developed in one sector increasingly inform the other. What school districts confront today offers a glimpse of the choices universities may face as AI becomes inseparable from established services. The institutional implications extend well beyond search.
Universities have spent years integrating external platforms into instruction, research, administration, and campus operations. Faculty senates establish academic policies, provosts approve instructional practices, and technology offices implement institutional decisions. Imagine a university prohibiting a particular AI capability in gateway mathematics instruction, only to discover that disabling it also removes a service students and faculty rely upon. The institution may have followed every appropriate governance procedure and still lack the technical means to implement its decision without substantial disruption. A faculty vote cannot create a configuration that the platform does not offer. This is where institutional authority encounters its practical limit.
The Cost of Losing Access
The recent attacks on European supermarket refrigeration systems expose another dimension of technological dependence. On Monday, attackers reportedly altered temperature settings remotely at stores across several countries, causing temperatures to rise and forcing retailers to discard food. The equipment was inside the stores. The ability to disrupt it came from elsewhere. On a university campus, a comparable vulnerability could place years of scientific work at risk.
Research laboratories depend on ultra-low-temperature freezers to preserve biological specimens, experimental materials, and collections that may be impossible to replace. Yale operates a monitoring service intended to protect more than 6,000 freezers and cold rooms. The University of Iowa warns that prolonged freezer failure can destroy years of research. Temperature control is therefore essential to protecting investments that extend far beyond the cost of the equipment itself.
Remote monitoring gives researchers an opportunity to intervene before temperatures reach dangerous levels. Some connected equipment may also permit authorized users to change operating conditions. The distinction between observing a system and being able to alter it determines what a compromised connection could do. Campus leaders need to know which permissions exist, who holds them, and whether staff can revoke remote access while preserving local operation. If research materials are destroyed, the institution bears the loss.
American higher education has already experienced how costly the loss of access to essential systems can become. In June 2020, ransomware criminals encrypted servers at the University of California, San Francisco's School of Medicine. UCSF said the affected data were important to its academic work. It paid approximately $1.14 million for a tool to unlock the servers and the return of data the attackers had obtained. The university faced an extraordinarily difficult decision because the systems held hostage supported academic work it remained responsible for carrying out.
Authority on Paper, Dependence in Practice
The sources of constraint in these episodes differ. Google determines how its Search product is configured, while the refrigeration disruptions and UCSF ransomware attack involved unauthorized access to systems. Each nevertheless raises a consequential question for higher education: What happens when the institution responsible for an outcome cannot independently control the systems that determine it?
Governance depends on the authority to make a decision and the practical capacity to carry it out. Universities invest considerable effort in establishing who may approve policies, negotiate contracts, and authorize expenditures. Yet the ability to implement those decisions may depend on technical settings and permissions controlled elsewhere. A university can approve a policy that its own technological infrastructure cannot accommodate.
Over successive renewals and integrations, authority can accumulate beyond the institution even as responsibility for the consequences remains on campus. Each platform upgrade or integrated service can alter the balance of control through seemingly ordinary decisions. Eventually, a university may discover that an important capability cannot be separated from a service it depends on, or that restoring independent operation requires substantial time and expense.
University leaders should be examining these conditions before the next contract renewal or major technology integration. Four questions deserve explicit answers:
• Can we reject an AI capability and retain the service our students and faculty already use?
• Which contracts permit a provider to change features or access conditions after adoption, and what would replacement cost?
• Who can modify research-critical equipment remotely, and can the university withdraw that access itself?
• How long can teaching, research, and essential operations continue if a provider's platform becomes unavailable?
The answers should shape procurement, institutional risk assessments, and continuity planning. Universities routinely calculate the cost of acquiring technologies, maintaining subscriptions, and expanding capabilities. They need comparable estimates of what it would take to refuse a new feature, replace a provider, or restore essential operations after a disruption. The ability to leave a technological arrangement deserves consideration before the institution becomes dependent on remaining.
Google's announcement gives higher education leaders an opportunity to examine the terms of their own independence. Institutions can negotiate contracts, evaluate alternatives, and establish safeguards while they retain room to maneuver. Once a service becomes deeply embedded, the cost of leaving may be far greater than anyone anticipated when the original agreement was signed. A university can retain its formal authority to refuse long after exercising that authority has become prohibitively difficult. And that is how an institution finds itself facing an offer it can't refuse.
