Backup camera works great. Backup camera goes directly into the APIM harness at pins 14 and 15. I just clipped the backup camera's RCA jack off and terminated it with the mating pins for the APIM connector. I then went in with forscan to change the value of A128 to a A328 at 7D0-01-01 to activate the backup camera.
I'm not sure what you mean by "tipping your hand" but the canbus infrastructure should be the same if the vehicle model could be factory optioned with the SYNC2 / SYNC3 systems. The 3 canbus interfaces are of the same speeds between all the ford vehicles I've studied. Sure, there may be different modules that may be missing or present dependent on options. I guess worst case scenario, I could sniff the canbus packets on another vehicleand resequence them to fake the 911 assist problem or figure out how to deactivate it within the APIM. I haven't had the time to do it yet but I believe reprogramming the restraint module should clear my 911 assist issue. Will confirm in a few days when I get back to the vehicle.