I work at very large OEM. We've run the numbers, and key fob exploits are _extremely_ rare. (most) Modern keys use rolling keys that are verified by the ECU, making cloning (let alone initial pairing) extremely time consuming. However, Keyless-go key fobs _can_ be captured and replayed (not necessarily exploited). 99.99% of the time that cars are stolen (which we find much more common in Europe due to small jurisdictions), someone will break a window, steal your keys, and drive your car away.

(wireless) Key fob capturing and replaying require far more equipment than NFC PVC card (credit card) cloning.