I think the idea is that if the operator is incapacitated or the control system is malfunctioning, stopping the train is the safest solution. While true, a multi-shot timer would be equally effective in detecting such a situation.