It is not GoDaddy's fault. If you want to blame anyone blame the domain owner who let his gmail email acct get compromised and also for not protecting his domain properly. You can have domains set to not be transferred at GoDaddy without human contact too.
__________________
|