Better security ‘could have prevented’ metro tragedy