I think on porkbun they explicitly tell you that some domains like .com do not have the option of enabling WHOIS privacy. So more likely this has something to do with the registrar and not gandi themselves.