I remember seeing a talk at RSA a couple of years ago about the plausibility of the "Italian Job" type attack, where they make all the lights green and cause everyone to crash.. they said that sort of thing was impossible because there is a mechanical switch that prevents both lights from being green at the same time.
So at least an attacker couldn't cause those sorts of accidents, even if they could totally mess up the system.