When Woocommerce is configured to allow customers to "register using the email address for the username," they can overwrite the capabilities of another existing user, even if that user is an Administrator, when they make a purchase and create an account on the same form.