Most schools track a students “publishing permission” or similar, basically a checkbox in their systems that says if a student/their parents have consented to allow pictures of the student to be published by the school. It could be that your parents did not opt out, or did opt to allow publishing pictures of you.
You should check with your parents and the school. If you’re afraid of retaliation and don’t want to check, there’s really nothing else to be done.
Yes.
The purpose of multi factor authentication is that it requires multiple factors, that can be:
These are the most common examples.