Since GDPR most registrars redact personal data from public WHOIS by default, and privacy or proxy services substitute their own contact details. The registrant’s identity then lives with the registrar or proxy, reachable by legal process rather than by lookup.
A stronger variant has the provider register the domain in its own name on the customer’s behalf, moving even the contractual relationship. The domain registration article documents the options and their tradeoffs.