Domain registrars doing security well?

I'm looking to move domains to a more secure domain registrar. A lot of the ones I've used don't employ any kind of 2 factor, alerts or email verification for domain changes, leaving the domains very vulnerable.

The kind of things I'd want are: 2 factor login, email alerts on account login and domain changes, transfers out requiring email or 2FA verification (either when unlocking domain or receiving the auth code).

1. Should I be looking for any other features?
2. Which registrars offer this?

Namecheap ticks several of these boxes, I'm hoping there are others to choose from.