It's more about the fact that they didn't have a webpage in their apple account where they could remotely log out, and the IT department had the physical computer so they had to either move to the department or give the department their personal password, which is bogus. Being able to remotely log out of the computer doesn't seem to be that big of an ask.
I get thay the computer should remain locked if there's no internet, but once the computer gain connectivity it should unlock if it was logged out in the user page.