I don't believe the source of lack of change would be pure stupidity, but rather an extreme weighing in the favour of short term money making.

Most EMV countries have standardised on Chip + PIN, and before that on magstripe + PIN, and it is used equally across all of them.

Perhaps the problem is that people still think in terms of 'good guy' and 'bad guy' and nobody wants to be the 'bad guy' that made everyone upgrade their system to some sort of secure payment method. https://www.theatlantic.com/business/archive/2016/03/us-dete...