Is there a good way to protect against this aside from good password hygiene at your domain registrar?

I use namecheap if that is relevant--maybe there's a better/more secure registrar to move to.

But I guess, equivalently, someone can just equivalently hijack your email account directly if you use a service like Gmail or Yahoo.