The thing that is enforced by the train when LZB goes down, is that the train stops. This seems to have worked correctly. Bringing a train from a stop to movement again is a potentially unsafe situation, and the situation is that the automatic system can't get movement authorities, so no safe system is going to do that automatically.

I understand that, but why can't the train self-limit to the 40kmh that the law requires when the security systems are down.