Transit cyber risk should no longer be covered as a rare technical scare. It is a routine operations story tied to public trust and service continuity.