They probably won't be the cheapest (most .com's are $12 a year), but they don't try to upsell much if at all, the pricing is really consistent and there are no surprises (no bullshit like the first year is $1 and the next year is $40 unless you remember to go do something), and their management UI is really nice.
I only have about 6 domains with them, so keep that in mind, but I've been extremely happy with the whole thing.
(Which closes that gaping hole in your email security.)
They can be the same thing if you want, but they don't have to be. You can use an externally hosted domain with google apps, and you can use Google domains without "google apps" (like I do).
Also, as of somewhat recently, I believe you can disable "recover by phone" as an option if you want for any google account.
For Germany, just for reference, there is Webhostlist [0], which gives me over 400 different hosting packages (obviously not 400 hosters) available with at least one domain and an included SSL certificate. Starting at 0.38 € per month (.de domain included) with a one-time setup of 0.99 €.
DNS: CloudFlare