I used to think that. But from my experiences, their customer service is crap, and I had a bunch of downtime on their VPS offering with no compensation offered.
I've stayed away from them since then. Not a very impressive company, and I'm not too surprised they're failing to deal effectively with this DDoS.
Gandi is a domain registrar first and in that respect they're lightyears ahead of the competition. They don't do shady stuff of squatting on your domain searches etc.
If you choose to use a value added service like VPS, you should expect subpar experience. You can go to any cloud provider and find a service for which you're going to have a worse experience than you had with Gandi VPS.
Try njalla, a privacy focused domain provider. It was founded by Peter Sunde, one of the original creators of The Pirate Bay. You can pay with crypto currencies and they even have a .onion domain of their website, so you can reach them over Tor.
They buy the domain themselves, and let you pay with Dogecoins -- possibly a good deal for the next Pirate Bay, but not what I would use for general domain registration. There is a good chance one day they will go down and take your (their!) domain with them.
From their website:
---
We're not actually a domain name registration service, we're a customer to these.
[...]
When you buy a domain in our system, we're actually purchasing it for ourselves. We will be the actual owners of the domain.
If I bought what turned out to be blunt or broken kitchen knives from IKEA, and they refused to accept a return and offer a refund, I wouldn't shop there again either.
We used them for years too but their admin panels and tooling had too many issues. We lost access to stuff more than once and we moved to name.com at some point. Haven’t had any issues on name.com so I would not really recommeng Gandi.
I would not call Gandi high integrity folks after having seen that story of them losing customers' paid emails and telling them to restore from their own backups
https://news.ycombinator.com/item?id=22001822
I've stayed away from them since then. Not a very impressive company, and I'm not too surprised they're failing to deal effectively with this DDoS.