Or Route53 if you're using AWS since that makes it easier to integrate with the rest of AWS and manage in IaC, and AWS also has robust network/DNS infrastructure.
(I would say GCP if using GCP/Google Workspace, too, but since they split domains off to Squarespace I really don't know what is happening over there anymore as far as domains go.)
So far those 3 have been more than sufficient for all of my domain needs.
This is kinda buried but the whole scenario makes a lot more sense with that context.
Otherwise, Porkbun or Cloudflare Domains if you're ok using their DNS.
As in "pay a lot of money", and we'll dedicate someone to your domain who makes sure that "giving a domain to a stranger without any documents" will _never_ happen.
I haven't spoken to them in like a decade, but they also offered other monitoring stuff like notifying you of likely phishing registrations, etc. And it's no longer novel now with options like Route53, but they used to be one of the only solutions with proper RBAC/delegation/audit logs.
Depends. If it's something really high priority (like main domain for a large corporation) I'd likely be paying CSC 4 digit sums per domain per year.
For stuff a tier below that I'd be looking at companies that are serious about security and happen to do domains as well e.g. Cloudflare, Amazon
Since cloudflare is basically the only registrar that will not allow you to host nameservers anywhere else I'd be weary to use them (even indirectly).
Could you elaborate why?