Whoever hosts your DNS is the weak point. Account and login security with whoever they are is critical.
DNS as well as registrar, which may be two different entities. You can either change the MX with the DNS host, or you can change the nameserver with the registrar.