I had my domain taken over while on Gandi. Interestingly they didn't do it via customer support, but instead were directly in contact with Gandi's legal department. Their legal guys approved the request/order without thinking to actually verify anything at all. Funnily enough, I had way more trouble getting my domain back than the people who stole it.

As far as I can tell, Google, Cloudflare and Namecheap are really the only guys in town that don't fall for stupid shit.