Resistance to length-extension attacks is one of NIST's requirements for the competition; a hash that had that vulnerability would have been disqualified.