Porkbun is a solid all-rounder. Cloudflare sells domains at cost so they're slightly cheaper than Porkbun, but the catch is that you're forced to use CFs nameservers so YMMV depending on whether you want that flexibility.
For Canadians trying to avoid US registrars - grape.ca. They've been in business since '99, I think they were one of the first CIRA accredited registrars for .ca domains.
It's been going on for years. I've personally tried to report phishing scams to Namecheap and get the laziest action on it (for example, I report 30 domains, and only one gets taken down and the rest + the account stay active) or totally ignored altogether after one or two exchanges. This laziness in response despite their platform being abused this heavily suggests they don't want to give up the revenue they're getting from it. The CEO is incredibly defensive about it and suggests that the security theater is evidence that they actually want to do something, but it's been years and they're still heavily used. This is despite not being the cheapest out there, which suggests that scammers prefer it for other reasons.
Piggybacking on this comment, what about alternatives for good/basic shared hosting? (i.e., PHP, MySQL, etc.) I've got a few WP sites that I maintain where I need keep something reliable, secure/trusted, and relatively low-cost.