I have owned and managed my .is domain directly on ISNIC for over a decade. They support 2FA and the website is available in English as well.
Process was pretty straightforward and I was able to add my DNS records just fine. Do you know if they have any safeguards against domain transfers? I don't see any settings related to that, other than to transfer my domain.