Is quantum cryptography unbreakable? People always say that "there is no such thing as unbreakable crypto!"

In most cases they are right. AES, RC4, RSA, C25519, DH, .... are all cryptographic algorithms which are crackable (with extreme effort).

The asymmetric stuff, you can factorize; the ciphers you would have to brute force.

But from what I understood, symmetric quantum crypto is kind of uncrackable. It uses quantum mechanics (who would have thought?) to directly send the symmetric key to the other machine. But the sequence changes every read cycle, so if the attacker would sniff the traffic he would have a key other than that which the recipient received, and the recipient would know that the key was tampered with.

So, is quantum cryptography even breakable without physical access to the machine? And if yes, how?
You have to distinguish between &quot;theoretically&quot; and &quot;practically&quot; breakable. Pretty much any cryptosystem can be broken in practice by violating the assumptions that the theoretical security proof uses.
For example, with Quantum Key Distribution and a OTP, you might have theoretical perfect secrecy. However, the proof for such a scheme does not address the possibility of &quot;Wait for them to receive the message and then threaten them to obtain it&quot; - and there is nothing that QKD + OTP or any cryptography can do about to prevent this type of attack. This is because such an attack specifically targets what the security proof of the cryptography does not cover.
So in that sense, when an adversary has such options, achieving &quot;unbreakable&quot; security in practice is not a realistic prospect: In the best case scenario, with theoretically perfect crypto (i.e. QKD + OTP), there still exists a trivial solution to breaching the confidentiality of the information: Simply extract the information physically from the recipient, after they receive it. The implementation might be complex and expensive, but it is certainly possible in a practical sense.
Edit
This rather scathing blog.cr.yp.to post reiterates the the importance of the used assumptions and raises some technical points aside from the ever present threat of rubber hose cryptanalysis:

A company named ID Quantique has been selling quantum-cryptography hardware, specifically hardware for BB84-type protocols, since 2004. ID Quantique claims that quantum cryptography provides &quot;absolute security, guaranteed by the fundamental laws of physics.&quot; However, Vadim Makarov and his collaborators have shown that the ID Quantique devices are vulnerable to control by attackers, that various subsequent countermeasures are still vulnerable, and that analogous vulnerabilities in another quantum-key-distribution system are completely exploitable at low cost. The most reasonable extrapolation from the literature is that all of ID Quantique's devices are exploitable...
...how can a product be broken if it provides &quot;absolute security, guaranteed by the fundamental laws of physics&quot;? The correct answer is that the hypotheses of the theorems, the assumptions made in the theorems, are not the laws of physics. The hypotheses include

an embarrassingly oversimplified model of physics that can express some quantum concepts but that ignores critical long-distance interactions, notably electromagnetism; and
an embarrassingly oversimplified model of the attacker that allows the attacker to inspect photons being sent between quantum-cryptography devices but that does not allow the attacker to interact with the devices in any other way.