If they can't secure their own keyfob, I'd be worried that a phone app will open a remote vunerability. My car has an optional subscription that would let me u

If they can't secure their own keyfob, I'd be worried that a phone app will open a remote vunerability. My car has an optional subscription that would let me unlock it with my phone -- I didn't sign up for that subscription, but I bet that it's active on the car's side and if there's a remote vulnerability, it's exploitable whether I've signed up for it or not.