It is trivial to remotely take control of the brakes of nearly any #train in North America (both freight and passenger):
https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-10
A quick writeup: https://xcancel.com/midwestneil/status/1943708133421101446
Until people who truly care about #security are given a lasting seat at the table, overriding entrenched political interests to maintain the status quo, the #rail domain will never experience any meaningful success in the security realm.