This sound like you're saying you don't normally do a transaction log backup? Do you? What recovery model in your database in?

Also, you're naming convention seems wrong. You use:
FROM ' + @dbname + '[.bo]
If you're including a database name, then you'll need to use 3 part naming convention:
[database].[schema].[object]

https://blogs.technet.microsoft.com/dataplatforminsider/2017/12/11/whats-new-in-ssms-17-4-sql-vulnerability-assessment/

I'm actually a little concerned what our VA report is going to look like. Time to find out! 🙂

This is a little bit of a "quick answer", as I'm sure there's faster, however, you could use the DelimitedSplit8K function:
SELECT t.StudentID,
      ...

Sounds like the SA account has had it's sysadmin privs revoked, and not had a user created on the database.

Out of interest, what does the following return?
USE...

If not the same number, is it the order in which they appear in the delimited list? (which, in your examples is the same, but who knows for your real...

Does anyone use a NAS at home? Anyone able to recommend an affordable 2 Bay for home use? I recently picked one up, and (for some reason) the minimum file...