It’s a shame that payment and transit are two of the most requested things, but they are the hardest to do.
Because they are linked to a real bank account or a ‘stored value’ and cloning or tampering with them can have real world financial impacts, they are protected very well.
Unfortunately the only way to get to play in their nice, safe, sandbox is for them to open the gate.
There have been cases where transit authorities have used older, less secure cards - and in basically all cases, people have modified their credit value, or made their ticket not expire, or all manner of things that cause chaos - they’ve learnt their lesson!