So how can a package return true to -->can('function') and yet it can't execute function? It seems to me that that can't happen?

The same way that you can call 411 and get Joe Blow's phone number, and it automatically put you through, only to get "This number is no longer in service". That is, the can lookup doesn't jive with the execution mechanism.