The standard allows for both options (and that switchability has led to security holes in the past[1]). Nowadays I think most of them validate the PIN on the server side rather than on the chip, which is better in some ways.

[1] https://apenwarr.ca/log/20110222