The ICANN has changed the domain transfer rules because they are evil.
I found this article on Slashdot this morning about how ICANN is changing the rules on domain transfers to inexplicably make it easier for hijacking. There is some good info on netcraft about it. Here is the actual change language. It freaked me out, of course, so I went to make sure that all my domains were locked. Smartly, Network Solutions automatically locks their domains to make hijacking impossible. Moronically, MyDomain doesn’t. You have to specifically add it for each domain. At least it is free. I guess you get what you pay for. Now is a good time for you to check out the settings on all your domains and make sure they are protected.