[tombrossman]

Gandi, mentioned several other times in this thread, also supports 2FA. https://wiki.gandi.net/en/contacts/login/2-factor-activation

You can also create a second account there and delegate limited rights to it for making changes. The odds of losing both accounts are remote.

[resistor3672]

Gandi also does IP restriction: http://wiki.gandi.net/en/contacts/login/ip-restriction