I had to respond since I didn't want Namecheap to remove my business from the internet. The response from the support agent was:

""" The preceding report appears to have been sent to you in error. Please accept our apologies for the mix-up and the false positive alert.

Please let us also assure you that we do value our long-term partnership with you and value you as our loyal customer. The situation experienced is no more acceptable to us than it was to you.

Such a time frame was specified in our initial email as phishing is considered to be a time-sensitive issue. However, we try to extend the time frame provided to our loyal customers to the maximum possible extent. Hence, the 24-hour time frame would have been extended in case of no-response from your side and we would tried to reach you again. """

I CC'd the CEO, but haven't heard anything direct. I can't have my domains with a company that has their trigger finger glue to the "suspend" button. I just don't know who else to register with. It's all a race to the bottom in terms of service and pricing. There doesn't seem to be a middle ground between MarkMonitor and Namecheap.

There used to be a middle ground between MarkMonitor and NameCheap, but Network Solutions was acquired by web.com. Not horrible but they at least do not have a trigger finger on domains and they proved their backups worked in the OVH fire. I had to help teach their support staff how to use "dig" and it took many emails back and forth to get a new tld set up, but no trigger finger. I am happy with Mark Monitor though.

Cloudflare appears to be an option.

You can't register a domain with Cloudflare. You can migrate one to them though. Using AWS as a registrar is probably not a bad idea either.