The bulk of Chinese students are undergrads and unlikely to be very effective spies. Grad students have more access to technical information worth collecting.
It’s the post-docs, visiting professors, and faculty members from China that most bear watching. Some of them have likely received intensive training in network penetration, and US university IT networks have notoriously bad security.
But even bad relatively ineffective spies when there are so many can send back a lot of information.