You will hear about GoDaddy more as they are the biggest. Most thefts occur from email phishing, using weak passwords or using free email accounts that get hacked.
If you have enough domains you can get an executive account rep at GoDaddy. My rep has to call me at a phone number not listed in whois and I have to do something like give him a password, sing a song etc... whatever you want it to be. Without giving him that info we set up nothing can move out of my account even if I give ya my login/password without that phone call being made from him and me giving out the correct info.