Procedure is evacuation and bomb squad.

the device looked like a bomb

Yeah, I thought about that a lot while writing this up. Ticketing someone for taking up 2 seats on a train car that’s likely empty rings a lot of alarm bells.