Go-daddy does need to rubustly protect their site and client data. A compromised major registrar can wreak havoc via domain stealing and we have seen how hard these hijacks are to unwind, google the sex.com hijack - took years.
So they need to give each of their suckered employees a caution as well as a carrot($$). The hijackers often try such schemes, so awareness needs to be high - defences also must be high, so multiple entry(2-3 means) verification is needed,