I should warn that bike shedding about this distinction is absolutely not worth your time if you’re reading this and have less than like 100 blog posts written or are running a business on these sites (in which case I think you should pick Netlify). Go write something.
And also, who cares it's a static host and you can change to another one in an afternoon. There's zero lock-in when you're only rsyncing some files around. Just make sure you have total control over your DNS (buy a domain, put it on a good DNS host) and you really can't screw things up too badly.
CloudFlare can be used for dns registration and management as well as ddos protection, ssl cert issuance, origin hiding, static hosting, edge computing, and more, all in the free tier. If you use something like namecheap, you may find the dns resolvers aren’t super great - eg. Changing a record may take 30 mins to propagate because they use higher TTLs by default, whereas CloudFlare’s anycast dns network usually propagates a DNS change where its testable on any network within 60 seconds. The downside of using CloudFlare for both your registrar and operationally is if they ever have an outage at the registrar tier you won’t be able to route to new nameservers. If you’re worried about that you can buy your domain through someone else but point at CloudFlare’s nameservers.
Used to be a happy Gandi customer but disagree. They ditched their no BS slogan, lost TBs of customer data and made inappropriate remarks about that on social media https://techmonitor.ai/techonology/cloud/gandi-outage-hardwa..., and the upgrade to a new customer portal has been nothing but messy and painful. Happy to no longer be a customer now
I've been super happy with Namecheap, but I only use them for the most basic stuff like A records, CNAME, etc. They don't have an easy to use API (IIRC you have jump through a lot of hoops and whitelist your IP to get access) which is both a good and bad thing.
It's good security because APIs are just another way to gain access to your stuff, and an attacker controlling your DNS has _incredible_ access to ruin your life (steal email, impersonate you... the works).
It's bad though because increasingly we're automating certificates and other stuff through means of using DNS as proof (i.e. set a magic TXT record and lets encrypt will grant you a wildcard SSL cert for free) and many scripts need a DNS provider with good API.
So long way of saying for basic stuff where it's just you going into a dashboard and clicking around to change settings--Namecheap is great. Their DNS comes free with purchase of a domain for a couple bucks, you really can't beat that price.
If you need programmatic API access step up to someone who is running DNS as a core part of their business IMHO--Amazon Route 53, Cloudflare, etc. The bigger the better as they'll have more security resources, support good security practices like 2FA, hardware auth devices, etc. and just generally have more care taken with access to DNS. You'll pay more but you'll get more in the long run.
