@Kevin: Actually this new variant is to play with students that happens to have Unix cluster account (usually without root access), so "rm -rf /" would have no effect anyway even without that protection.
And ruining the users own account for his/her bad behaviour/temper serves them just right.