There's a difference between not allowing spaces and not hashing. They could have just written a bad PW policy that doesn't completely make sense

You're drawing conclusions from information that doesn't lead you to one.