Agency does not plan to fully implement recommended safety measures until 2027, despite reports of hundreds of security incidents ...