I seem to remember that being the case with Network Solutions back in the early days.

Gandi seems to hide your handle these days for certain domains if you have whois privacy enabled: my .com/.net names with Gandi don't show the handle, but my .org domains do. My .us domains (which don't allow whois privacy) also show the handle.

Then again, one can easily enable two-factor authentication and it's essentially irrelevant if the handle is known.