Wonder if they just use the serial number only iButtons or if it's more complicated.

Pretty sure they only use the serial number. About as secure as an ordinary key or remote keyfob things. There are the wonderfully complicated java crypto buttons, allowing challenge-response, but I'm sure they haven't used those.