Dotster was similar for DNS hosting, several years ago.

Called them to get access to our account after a problem, and they gave me admin with no verification at all. Just provided the account name, was asked for new password. Like... WTF?

Tried telling their security people, who then denied it happened, let alone it being a problem.

Our DNS hosting was moved away from Dotster shortly afterwards.