Surely access to common areas should be through swipe cards that are not able to be easily copied? This allows for them to be easily cancelled without affecting other residents.
When a key is lost which requires rekeying then there is the hassle of reissuing new keys to all residents.
The difficulty here is every state has it own regulations, every OC has its own registered rules, some OC may have ratified rules only found in minutes of meetings and every building is different.
The size of the building, the number of OCs in the building, the approved usages in the building (commercial, mixed, res only), the age of the building, the act under which the building was "stratified" all create variances where a single answer cannot be given.
All answers here will come from an individuals experiences. I have apartments in three capital cities and each one has its own individual challenges and quirks from the multitude of factors at play.
Some older smaller niche buildings with mainly permanent residents less than 4 stories with no common areas other than a foyer, and no elevator are perfectly happy with "real" keys and owning responsibility for not losing them, no fancy services, low body corp fees.
Some large mixed tenancy 44 story modern buildings with hundreds of residents that are much younger and lots of renters have fancy video call doorbell systems, keyfob RFID systems, onsite concierges, pools, gyms, theatres, and cameras everywhere.
There is "no" standard apartment building.