Originally Posted by boogle
Agreed. Plus, registrars should not be allowed to change any details within Nominet. If I’d looked in my account a few days later I could have seen more than one domain disappear.
Registrar's have always been able to update email addresses, and many other fields. They're trusted by Nominet to do it. If you want to remove them the right to update records, then why not abolish all Registrar's all together and have everyone deal with the Registry directly? What would be the point of having them if they couldn't update records? Incidentally Registrants can deal with the Registry directly. However it costs about £80 + VAT to do it per domain name.
What happened is unfortunate. Fortunately you were able to resolve the issue very quickly. If you want more security, there are options open to you but they will cost you more money. Alternatively change to a Registrar who has better security in place and, perhaps, requires a copy of your passport, or will setup additional passwords with you in the same way as online banking, before they will make a change to a record.