> so you can't use a "hacked" train to hurt anybody except its passengers or maybe, in some cases, passengers on a nearby train.

Yes, is that not enough?