Update. 1and1 has pushed this to the domain group (I guess that is good)
Namecheap has assured me the domain can not be pointed elsewhere until this is resolved (makes me feel good!) and they state 1and1 has to put forth a document saying my name was transfered without my approval. (I hope this is what they are doing right now)
So it looks a LOT better than it did a bit ago.