That was my thinking too.I suppose it depends where the PATS system data is stored (Early Fords in Instrument Cluster, later in PCM or BCM).
If the have access to ODB port and have the ability Module Update any firmware (including their own bulid) they could already have a Module flash ready with their keys baked in.
With the cars VIN, all the Module files are available from Ford, they could modify at their leisure.
For all we know there could already be PATs/ key code free Module firmware floating about..
Another anti theft feature that's back fired - putting the VIN on display in the windscreen. It's interesting that on my new Toyota they've got the panel in the windscreen but there's no VIN number stamped- it's blank.It would appear that both dealer and auto locksmiths can cut a key based on the VIN number.
In the later MK2 uplifts, keyless can also be disabled in vehicle settings on information displayHi Out there,
If you have keyless entry on your kuga it can be disabled by removing fuse F3 in the luggage compartment fuse box. This means the thieves will have to either have the keys to open the door by using the key fob button or smash the windows to get in which will set off the alarm. The OBD pot is way down by the foot well on the drivers side and as the doors will be deadlocked and the alarm singing off it will probs be a no no for them.
Fake OBD a good shout too.
I've got some schematics for the 2016 US Escape and F3 is listed as "Exterior door handle left rear.... right rear... left front...right front." Have you tried the tailgate to see if it's also disabled?If you have keyless entry on your kuga it can be disabled by removing fuse F3 in the luggage compartment fuse box.