I can see that the form elements are disabled by activating a layer over them. This is done on page load depending, ultimately, on the OnePageCheckout class attribute $billtoAddressChangeable. However, I can't see where this is ever set to true. And even if I try initialising it to true in the constructor, the layer is still not activated.