I would bet if you ran the ‘last’ command you would find out there are 3 users logged in as root. I believe ‘names of users’ returns those who are logged in. Not processes running under a username. The following might help you in extracting information from /etc/passwd in the future:
Q: ((parenthesized part 1 of it) of (matches (regex "
(
:+)
:
+)
:
+)
:
+)
:
+)
^:
+):(.*)$") of (lines of file “/etc/passwd” as string)) as string)
