I don't know think about it how many times does a locksmith call a dealership with a legit reason, or the dealership have to look up this internally. We are looking at an average of 4.2 look ups a day. If the national average is only 1 database look up per day per dealership then it should have been a red flag but what if 5 is the national average and this dealership had 9.2 then it would just be an anomaly than an automatic red flag
is it possible that the code is part of the standard screen displayed for the car? If its part of some standard display it may not raise any flags. Type VIN in, get all sorts of information they consider common to inquiries.
For physical keys there are not that many variations per model of car, some are even interchangeable between related brands. I wonder how unique coded keys are?