Well, BART had one crash because the automated control system mis-read a command and accelerated when it should have been braking. Debuggable? Perhaps. But after that, it's a tough sell to say that there shouldn't be a human in the cab to say "Wait a minute, that's not right."