A shame that you have to pull your phone out for this to work. Really the best way is it just being in your pocket and you walk up to the car and open it. I am surprised actually that they can't do that. My previous car was a 2020 Subaru outback and that worked with the fob. I just walked to the door pulled the handle and it opened. Same obviously for my Tesla Y. Anything less feels like old tech.
You don’t have to pull your phone out. This is technology built on UWB and Bluetooth.
The original iteration used NFC which needed you to scan the phone (both to enter a car, and to start it, two scans). But the current iteration is done entirely without contact, and nobody is launching a car these days with purely NFC (NFC can be used as a backup, in case phone battery is too low, it can run the NFC side for a few hours after hitting 0).
yes you are right, do not feel comfortable putting everything in my phone, any thing over the internet can be hacked, leaked, companies are always using your data with out your consent
The car keys do not use the internet to facilitate every day entering and exiting, and the code for binding a car to a phone is stored locally only and there are no ways to reveal the code (this has been the way iPhone security has working for a long time now, there’s a secure element that contains codes specially created and the codes do not get sent anywhere and it only uses crypto operations to validate the code is present).
In other words, someone over the internet can’t do anything to steal a car key resident on your phone. It requires local access and a passcode to get into the device.
However, online accounts, like for car apps, can be intercepted and then someone can add a key to your car on their phone, those apps will use 2-factor though, so it’s probably most easy to do a SIM transfer to get into an account. I protect my cellular account with SIM transfer protection, but not everyone has enabled this.
So yes, there are problems with security, if you’re doing your due diligence you probably have nothing to worry about, but yes, there are people more vulnerable to some types of attacks, especially social engineering attacks.