I don’t have a registrar to recommend, but for the nameservers (which would already solve your problem) I had a good experience in the past with Hurricane Electric (dns.he.net). AFAIK the only requirement from your list it doesn’t satisfy is being European (not 100% sure about MFA and scoped tokens).