Maybe, as a first shot, they decided to favour near-instant implementation over usability by simply setting the price for an existing product to $0 and use the existing checkout flow.
Because whois, along with the many people who scrape it, provide a public record of my domain ownership. With privacy protection it is a lot harder to prove ownership if the registrar makes a balls up.