For playing, though, you could enter just about any number you want for VID & PID. Just don't sell a product doing that.
I wonder what the sanction would be against selling a product with an unused VID, it's not like a DNS entry that the internet police can delete? I quess nothing at all.