They're not passive. If they were, you'd see a lot of articles about Teslas being stolen after someone walking by used an RFID reader. They contain a private

They're not passive. If they were, you'd see a lot of articles about Teslas being stolen after someone walking by used an RFID reader. They contain a private key to create a challenge-response system with the car that essentially makes them impossible to clone. I've seen articles of people using Java cards to create a Model 3 key card that works, but it wasn't possible to clone an existing card. They created a card, then had to use an existing authorized card (or phone) to unlock and turn on the car, then use the car's tablet screen to add the created card to the list of authorized cards.