They're not. There is AFAIK an ssh key infrastructure for OnStar that's modern and well-run, for example.

Things like key fobs are most likely very incremental changes on "this is the way we've always done it". These organizations are behemoths and steer with all of the inertia of a containership.

And tend to get stuck in their ways like a container ship stuck in the suez canal