Not OP, I just took a look at Porkbun. They appear to take security seriously. You can choose to receive emails upon each successful and/or failed login. You c

Not OP, I just took a look at Porkbun. They appear to take security seriously. You can choose to receive emails upon each successful and/or failed login. You can view a list of recent logins to your account on the website. You can force log out all sessions. Additional authentication methods include two-factor codes, WebAuthn w/ physical keys. You can download a set of backup, one-time-use codes. You can restrict IP addresses allowed for login. They also check if your email address is present in known password leaks, and prompt you to turn on 2FA for added security. The web interface is quick, has a simple design (Bootstrap/Foundation? for CSS), and doesn't feel flimsy.