Haven't had a domain stolen in 10+ years. If ya can get a GoDaddy account rep they can lock your whole account down from transfers. GoDaddy has to call me to a phone number not listed in whois and I have to tell them the secret word, number, etc... for anything to move. That combined with Escrow.com transactions makes things pretty secure. I also don't do external transfers when I sell. If I sell a domain at GoDdady it gets transferred to a GoDaddy account. Should payment issues arise then I know it's still in GoDaddy's hands and I can contact my rep for retrieval assistance. If you transfer names to an obscure registrar upon a sale odds go down that you will retrieve it pending payment issues.