I recently closed a question at 11:13:15Z and user answered at 11:14:40Z
How did he do that?
There is a 4 hour grace period where someone with the editor open can still post their answers after a question has been closed.
This is by design; a feature, not a bug.
The user does get notified when a post is closed, and the Post Your Answer button is disabled when the notification is received. Either the notification hadn't come in (yet), or the user was really determined and re-enabled the button. The mobile view of the site doesn't get the notifications at all, and as a consequence you won't need to tamper with the button either.