It's most likely that they're using lower(password) everywhere, except someone forgot to use that on the account deletion page and no one noticed.