The distribution is not flat. The Russell Group is much richer that many "old polys" and one or two RG universities are much richer than most of the rest and within one of the RG, one of its college's cash piles has to be plotted on logarithmic axes if you want it on the same graph as all the others.
But actually, all that cash (wherever it lies) is probably not the issue. I suspect that the real issue is that universities have these things called students who are much harder to control (IT security-wise) than employees.
Biting the hand that feeds IT
