Only the registry really. The hosting provider usually doesn't control your domain, and the registrar is bound by the rules set by the registry. It's still a s

Only the registry really. The hosting provider usually doesn't control your domain, and the registrar is bound by the rules set by the registry. It's still a significant counterparty risk though.