I bought a recent drop with Namecheap and when I logged in it was pending transfer to someone

Potential huge security risk here.

1. I registered a drop with Namecheap.
2. As soon as I checked out I went to the Manage section and then the Sharing & Transfer (I honestly don't know why as I wouldn't normally do this but I was looking for some setting).
3. There was a PENDING TRANSFER with someone's e-mail in the transfer section. I cancelled it.

Seems like a huge security risk since if that person had accepted it would just disappear from my account, then what? I brought this up with…

I bought a recent drop with Namecheap and when I logged in it was pending transfer to someone