The blog post states that the domain was erroneously flagged as belonging to a botnet system by a German law enforcement org, which took control of the domain to "sinkhole" what they assumed was botnet traffic.

Presumably the approval was the accident. (Or not renewing yet, so perhaps no approval necessary.)

Also, 'transfer locks' are a good idea, but not supported by all TLDs.