Can somebody fill me in on the security status of the .io registrar now? In 2017, a Google security researcher took over the registrar, meaning he could update

Can somebody fill me in on the security status of the .io registrar now? In 2017, a Google security researcher took over the registrar, meaning he could update the zone files externally. It was best practice to stop using .io at the time. I heard a rumor that a more professional registrar got involved after that, but don't know the details. Anybody know the story today?