Phishers who breached Twilio and fooled Cloudflare could easily get you, too

Does anyone know what, if anything, PorkBun could know about who this person was? What I mean is, is it really possible to buy a domain anonymously? I don't mean private registration.. I'm talking unknown to even to the hosting provider. Things like payment (apart from a stolen CC number) isn't every other payment method directly traceable to the bad actor?

Edit: I think I found my answer. Company takes multiple forms of payment including Crypto and Alipay. https://porkbun.com/support/payment_options