Looking through alldata last night I see what you mean about the elimination of the seperate PATS Module.
The data lines travel between the Cluster and the PCM, instead of the PATS and PCM. I pulled the dash and there is no PATS module or harness, not that I expected one.
But the implementation of the Explorer PATS seems simple enough as it just need communication over the OBD data lines which are the same and pinned the same. So possibly transplanting the PATS module, with the Transceiver (as the wire colors are different and 2 go to the PCM), and tapping them to the OBD Data will be sufficient to enable start on the Explorer PCM. Since you would be skipping everything in the 06 truck's PATS setup.
I hooked up the 115 Engine harness last night and connected a Solus Legend to the OBD port and it read the Explorer PCM just fine, for fun I turned the Key and obviously a no start with a No Crank at all.
Since you seem to know a bit about the PATS system can you verify if the 2000 Explorer PATS induces a No Crank at all or just a No Fuel / No Spark but still Cranks? I've read all kinds of threads of people claiming different outcomes of a PATS 'no start'.
There was no Theft/PATS indicator on the cluster at all, so I have no info on it blinking or not.
The Odometer did light up and indicate the trucks real mileage.
Obviously the rest of the Cluster working is a whole different senario and has no bearing on the possible success of getting around PATS.
Below are the Type B and Type E PATS diagrams.
View attachment 76838
View attachment 76839