So I’m an engineer in the passenger rail industry who often reviews and has input into the HTL (hazard tracking log). Stopping the train is assumed 100% safe for passengers and crew.

(Edit: you might be able to find some of these online, as regulators sometimes publish them for comment if there is a waiver request… not going to dox myself though)

Your point about external grade crossing hazards is valid… but also completely avoidable unless the train is super long (IE: not a passenger train) or the train was already going slow (like just leaving a station or signal).

There are separate system safety plans to ensure that timely/safe evacuation is possible regardless of where the train stops.

In the absolutely worst case, this means coupling another train and waiting the ~30 mins for people to walk through the train to the new cars, then uncoupling.