“Replay attacks can be pretty easily thwarted by using an incrementing counter in the communications to nullify previous signals, ignoring signals with a counter value you’ve already seen.”
A tenant recorded his thermostat’s radio signals and replayed them to run the boiler himself. The protocol is labeled encrypted. It has no rolling counter, so a replay works every time. Encryption without a counter stops nothing.