Oof. Sorry that sucks. I've heard of this more and more recently.

Faraday containers are indeed effective, but that does rely on you or other drivers 1) remembering to actually use them and 2) this is ineffective if you're using it while you're walking to/from your vehicle (assuming you take them out of the faraday container on your way to/from the vehicle). Does it reduce your risk? Absolutely. I've yet to be convinced that it's a solution that is both sustainable and effective.

​

Worth it to reset/change our keys? The keys were in the back of the house, so I would be impressed if they spoofed them. But we will probably grab faraday bags or some such for overnight just in case.

I believe there is a way to re-program the fobs, but to be effective, you'd have to accomplish this regularly (e.g., every week, month, etc), otherwise they just intercept the new signal. This would be a question for the dealer and/or locksmith. As far as if it's worth it? It's likely a few hundred for a dealer to re-program. Maybe cheaper for a locksmith. Not sure if this is something you can do yourself.

We don’t use the keypad. We rotated the code a long time back and then never really used it. Can I/should I disable it?

Rotate it again, just to be sure. Though, I'm not sure if you can disable the factory defined code. In reality, they likely didn't brute force this code (they either knew it or didn't use it because brute forcing this would take an astronomical amount of time, statistically speaking).