There is no law against using someone else's USB VID, as long as you don't put a USB certification logo on your product.
What FTDI did, on the other hand, is malware and clearly illegal. It is destroying private property and I guarantee violated multiple laws in many countries.