It's because some users prefer to be invisible (a control panel option). They're counted in the total, but they won't show up as being online.