The way it's supposed to work, the ground controller first verifies that there are no traffic conflicts before clearing vehicles to cross an active runway.

Which is exactly what failed here, so saying "it shouldn't fail by not failing" doesn't help terribly much.

Having grade-separate crossings for vehicles might, but that introduces new issues (plane skidding off runway could hit the incline and break up).