[dullcrisp]

Wouldn’t any Volkswagen keys need to cross the network to get into the Secure Enclave? Or couldn’t you exploit the Volkswagen app itself?

[brabel]

Keys in the Secure Enclave never leave the device (or the SE for that matter) and cannot be extracted even physically.

[Retr0id]

Newer devices support Remote Key Provisioning (RKP), so you still can't export keys but you can import them. (Physical attacks are still possible, just very difficult)