[dwaite]

The electronic key fob is typically not copyable, so you need OBD-II access to provision a new one even if you have proper equipment.

I do not know the VW app, but other electronic key systems do not require you to have physical access to the car in order to make copies. The keys are meant to be device bound and to have policy (such as I'm giving out access for a week), but that can only be assured via a chain-of-custody attestation system from the boot loader to the app and a hardware attestation that the secure element is proper.