I would have to go with Moniker because it's a ***** to transfer a domain out, but as seen in previous threads, there have been domain hijacking that occurred from there, it gives @PRED headaches (or was that GD?), etc... So as far as secure, I don't think security lies 100% in the hands of the registrar, but the registrant themselves as well.
You can have double login, call in, etc. to access your account. However, how easy is it to social engineer your way into getting information you may not be privy to? Let's say I did a complete background check on a domain owner for under a bill and found out their moms maiden name, previous addresses, credit report, etc, etc, and then worked my way into the system as being that individual without them even being aware of it... think that's the registrars fault for letting it happen, the registrants fault for not checking up on recent identity check or a third parties fault for security issues at that point?
In my book, it's the registrants fault for security concerns... I have monitoring on my credit cards, credit report and background checks. If any one of them are pulled for any reason, I am given a call (but who's to say someone couldn't intercept that as well by changing the phone number at the service I have before I get the call) to authorize it personally with publicly known information (example: "What hospital were you born in?", easily obtainable information).
So, I suppose my point is "Other": the registrant.
Like the polls though! :approve: