Mindless comments like these are not useful to the discussion. You are speculating on something that didn’t even happen, if indeed it’s just a newsletter provider that got beached.

Namecheap is still responsible for the third parties they work with. But nobody “gave your password”.