It's basically a lack of triggers to rebuild the who's online cache. Currently, it only rebuilds if someone actually visits the who's online page or when someone logs in or out I believe.
It's also currently alphabetical instead of by most recent activity, so if you have a lot of users online, some of them might not show up (this is something that needs to be changed).
