As usual, Mike - a very comprehensive reply.

I still say that they could use the Lambda Sensor heater current to help determine the temperature at least - but it is tricky as you say.

Basically, they are modeling the system based on experiential testing - ... Login to read more.