My only experience with Gandi was awful. Bought a bunch of domains from them after they were praised here on HN, was assured that WHOIS privacy is enabled by default and without any extra fees.
Looked up the WHOIS records a minute later, and my phone number, name and email were all there. Those were .com, .org and .net domains.
I think on porkbun they explicitly tell you that some domains like .com do not have the option of enabling WHOIS privacy. So more likely this has something to do with the registrar and not gandi themselves.
Same for my two .re domains. They explicitly show toggle buttons for „email“ and „contact info“ guards and I enabled those. But when you look in the fine print, .re domains cannot hide contact info.
Looked up the WHOIS records a minute later, and my phone number, name and email were all there. Those were .com, .org and .net domains.