If it was so easy to hack back into a command and control machine, law enforcement would catch more of the bad guys and cybercrime would not have become the perfect crime.
Like many projects in air-travel modernization, there's a chicken-and-egg question: Should airlines spend money on equipment before air-traffic control agencies prove they can work with it, or should air-traffic control service providers spend first and then wait for airlines to catch up?