That's an embarrassing configuration oversight -- it doesn't cost any more to add the "www" prefix to one's DNS record, and in the worst case the two names can be merged as one or the other.
In the worst case, someone could hijack the unused form and use it to redirect traffic anywhere they want.