It could just be that they cache availability data, then do a cache invalidation on purchase to make sure. I see lots of inconsistencies between what different vendors consider registered.
I guess check whois before visiting any registration site is the lesson here.
Namecheap is a good brand in my mind but if I find out they do this it'll be disheartening.