It’s very easy for even a private citizen to get a lot of information from someone just by using a picture of their face.

I don’t know about D2L, but I know Canvas has the ability to do some crazy shit all in the browser itself. I never got to experience the administrative aspect, but during the PoC of Canvas I remember seeing that professors had the ability to see when / how long a user clicked off a tab.