Porkbun uses cloudflare as their DNS backend, and has accidentally issued certs for domains hosted on them (
https://news.ycombinator.com/item?id=40455508 was one instance).
Since cloudflare is basically the only registrar that will not allow you to host nameservers anywhere else I'd be weary to use them (even indirectly).