It was Rainmeter; I was showing it to a friend. The IT guy even was like "yeah Rainmeter's pretty cool, I read about it in a magazine". But it was auto-detected and school policy, apparently.
My own child will never use a school-issued laptop or school wifi.
Why report when you can simply administratively deny?