WHOIS exposes 2 contact email(s) — registrar privacy not used

Registrar privacy is in fact used. It’s just the Namecheap abuse email address and an anonymized *@withheldforprivacy.com mail address. It shouldn’t list those as results.