Re: Derailer block
It's a path of least risk. The derailer is to prevent a runaway from getting onto the main line where it may then collide with an in service train carrying passengers. Better to stop it by crashing it into another parked train at low speed than to have it run away down the main line and hit another train full of passengers at speed.
As for the train keys - the basic problem is 100s of people require keys. It doesn't matter what system you use, keys / access codes will 'leak'. All you can do is try to contain it.
I believe most 'route buses' all have identical keys too, as do trams. You can be sure those have 'leaked' too and people have sets of keys who shouldn't.
Security patrols often don't help. They often to be found sitting in a warm office while the low-lifes are out in the yard giving a train a new paint job....