[doopfoopdoop]

Is there a good way to protect against this aside from good password hygiene at your domain registrar?

I use namecheap if that is relevant--maybe there's a better/more secure registrar to move to.

But I guess, equivalently, someone can just equivalently hijack your email account directly if you use a service like Gmail or Yahoo.

[tahdig]

I think namecheap does not have a bad reputation, godaddy is known to be bad though(both security and customer support).

The thing is, of course people can hack your gmail or yahoo mail somehow, but when you host your own domain, you have the same attack vectors + dns hijacking and this last addition is easier to exploit with social engineering. Google atleast is virtually immune to DNS hijacking.

[yjftsjthsd-h]

Just the usual advice, I would think: Strong, unique password, and enable 2FA.

[aabbcc1241]

It may helps if the sender send you password-reset email in encrypted format