ok... i think the point is that it should be mandated by law to have chip+pin(+maybe contactless)+CCV with credit cards, and also two factor authentication for most online transaction. Whether the current business model does not provide these assurances is inconsequential: it can be imposed as a customer protection law.

It is to be discussed whether the increase in the cost of the service would be worth it though.