Actually they are not. Once a domain is transferred it has a 60 day lock on it and can't be transferred to another registrar. It can only be transferred back to the losing registrar if there is some of accident or other clearly defined reason. This is to prevent people from shifting domains around primarily to avoid IP enforcement or UDRP problems.

Honestly this is a terrible precedent they have here. I am surprised they are doing this (if true and hence why I questioned the entire story) because it puts them at a disadvantage in future cases as far as 'why didn't you stop xyz domain registration that is now responsible for my child's death after I wrote to you and put you on notice'.