Because the teacher role allows viewing of medical info (which they need for the students in their classs), then if a teacher is a parent, they can view every single student's medical information on every class roster that their own student is enrolled in. These seems to be a major violation.

When parents are checking the "teacher" role to view medical, that implies that it is their current teacher,  not any teacher at the school.