The body diodes in mosfets will passively rectify back emf induced current without any intervention from electronics. If battery is left connected, above certain speed this current will begin charging the battery. I assume if towed long enough the battery can be overcharged unless BMS cuts the fuse. Then there is no longer a sink for this rectified current and voltage across mosfets will increase past their blocking capacity and blow them up. All this could have been avoided if Tesla chose to add 2 more contactors between motor and inverter and safe towing would be possible.
For that situation to happen, an unexcited motor would need to generate back EMF greater than the pack voltage at towing speed.
An AC induction motor generates no voltage without excitation, so that's out.
The PMSR is primarily SR with PM for smoothing (reportedly). A pure SR motor does not generate back-EMF without excitation, so the only source is from the PM side of things.
Let's say max towing is 70 MPH, top speed is ~140 for the 3. Back-EMF is proportional to speed, so if it can over voltage the pack when towing, it would generate 2x pack voltage at top speed.
For the car to hit this speed would then require some form of boost converter to provide a voltage to the motor higher than the back-EMF, produce a current, and generate torque. It would also require bidirectional switching so that, in the event of a failure while at speed, the motor would not over voltage the pack. (along with needing to block the back EMF to prevent unwanted regen).
However, the simplest drive strategy, and one supported by the tear down by Ingineerix, is that of a 3 phase chopper/ buck converter topology. Thus, the drive electronics cannot increase the voltage to the motor above the pack input voltage, and the back-EMF, even at top speed, must be less than the pack voltage.
Regen is accomplished via the back-EMF, winding inductance, and varying reluctance along with the buck converter operating in reverse as a boost converter.