There's Dynadot: http://www.dynadot.com/domain/security.html

Also NearlyFreeSpeech, though the domain selection is very limited, as it's primarily a hosting company: https://blog.nearlyfreespeech.net/2014/02/28/price-cuts-more...

namesilo.com is the best domain registrar I've used. No upsells, dirt cheap, great API, and 2fa.

gandi.net fits both your requirements.