> I'd be very surprised if a big name like Namecheap were doing that today though.

The risks with getting caught doing that intentionally are very high, but preventing any employee with access to lookup information, email addresses, etc, from selling it has been a very hard problem that most large names have admitted to failing at a few times.