Running domains with brand names, want to be as safe as possible. What things should one do to make the domain more difficult to be traced back to them? Guessing Namecheap & Whoisgaurd won't cut it.
check cloudflare or similar services.
Assign your domain ownership to an offshore entity that is annoying to sue and hard to get owner information from (in Seychelles for example).
Use a registrar that is somewhat privacy-centric (Internet.bs for example) and use their whois privacy feature (free).
Note that you'll probably lose the domains in WIPO if the trademark owner wants them, but c'est la vie.