It wasn't just students. A senior technician at the Wuhan Institute of Virology—a PRC national—was also granted access to the NML. That was also contained in the documents. They were identified as “individual number 2” in the documents.
Again, it was somebody in the department. It was not the two scientists in question because they're not granting security clearance for their own lab. Somebody else in the department granted them security clearances.
Why are they not being held responsible for that gross negligence in protecting our security?