Canspace - is one of my faves because pricing is consistent and the same on registration and renewal.
WHC is where I keep anything of value.... WHY?
You activate two factor authentication to get into your account and then you can select specific domains to have a second two factor authentication to make any changes on it. So if someone somehow get into my account (lets say you accidentally leave a device logged in) and someone tried to move red.ca away, or change name servers then it would prompt you for second factor again.
I use google authenticator for any additional authentication, it is much more secure than SMS.