Yeah, the system should simply prevent reserved names from being registered through normal registrars. But CIRA made a major change to their system this month, so the new system may not be preventing registrars from
attempting to register reserved names (I say attempting, not registering... because it's not really registered until CIRA says it is).
However, it doesn't matter anyway. CIRA has many rules that you have to agree to in order to sign-up and get a .ca, and this is one of the documents:
https://cira.ca/legal-policy-compliance/policies
In the "General Registration Rules", just 1 rule is this:
"Rejection, Refusal to Register, Suspension and Deletion by CIRA. CIRA, in its sole discretion, has the right to (i) reject and refuse any Registration Request for any reason whatsoever, to (ii) delete or suspend a Domain Name Registration within 30 days of the Registration Date and/or to (iii) delete or suspend a Domain Name Registration pursuant to the provisions of the Registrant Agreement."
I was looking for something else on that page, to reply to another thread just now, so I posted it. But I'm not going to reply here anymore, because I and others have given you the answer.