I heard njal.la experienced a social engineering attack on tucows to steal some of their domains at some point.
Oh, I did not know that was the reason. IMHO it is better to know it was not because of malice.
is there really any DNS registration that cannot be lost if enough powerful people demand it?
The answer is no. I was just trying to give a heads up, because a friend of mine just warned me of it, and I remembered I learned about njal.la here.
There are a lot of cases of people losing their domain without reason.
njal.la uses https://www.tucows.com/ as a source
No but the latest build is from 2018/19 probably there are exploits. I guess.