I waded through most of it and it seems as though the domain owner's email was broken into which then allowed the thief to begin the transfer process. So from what I'm reading here it actually wasn't GoDaddy's fault but just another Gmail account broken into.

I hate GoDaddy more than probably anyone here but it looks like their upselling and bad design didn't cause this one. Rats! I really wanted another excuse to talk shit about GoDaddy.