It’s both. Some domains do not allow WHOIS privacy (.us is one of them), some have it built-in, while most don’t care and registrars can fill in with fake data.