This is quite a traditional attack going back years at this point. It's also incredible effective and regularly used by car thiefs across the world. The hardware thiefs use to execute the attack sometimes differs per brand or model so it's not a universal attack per se, but leaked data sets about car ownerships make it easy to get a good return on investment for even just a repeater that only works on a single model.

These automatically unlocking keys should really be stored in a Faraday cage while not in use. When it comes to phones, well, disable Bluetooth when you're not near your car if you've set up this functionality, I guess…