If this is activism, what is political goal here? It seems like all this does is enable people with a highly-paid skill (accessing tor, then deploying/running scripts) to not pay for transport.
The public version is to demonstrate that large enterprises looking after public infrastructure & contracts still fail spectacularly to implement basic security practices in their products.
Under the covers, it's an invitation to have a go at transport operators who are unpopular and have a reputation for offering low-quality services at high cost.
So the goal is to say "look, your security is stupid, we will all have free rides until you fix it"? That's most likely to result in more money being spent by the public transport company to counter the bad PR and fix the issue.
I'm not sure that making public transportation free is the right idea to make more public transportation available, since the public transportation networks use the money from fares to function (in addition to money from the gov, any network with farebox recovery ratio [0] < 100% will need an external money source)
Still I agree that public transportation is a common good and I'm happy to live in a country with above-average networks (both at the local and national levels).