Patch management advice misses the mark when it assumes IT capacity that simply doesn’t exist in most school districts.