Action understandable for some heavy file sharing, or CASM, or something really sketchy.
This was apparently done preemptively for domain utilizing SW where even coordinator can't know who is who and is innocent by design.
So yes here could be the registrar blamed for such kneejerk.
