Cyber Security Training v. Cyber Security Education for Middle to High Schoolers

In my community, we have one state university that offers cyber security training once a year to high school students that show interest. Last year a student, after receiving this training, hacked his school.

Should we be training high school students or focus more on education? Do you feel that a "all of the above" approach will help mitigate risk associated with training minors in cyber security, and if not, what training would you provide to the students if you think it would be a good idea to train them in the first place?