Every country has a different way of securing cards, and north america sucks at it.
Depending on the payment processor, here in Canada you need my card number, as well as one or two of the following: PIN, Postal Code, CVV/CVC, a voice changer and my mother’s maiden name, etc to do a transaction without my physical card.
With my physical card you don’t even need that for $2-300 purchases (depending on retailer), or more if the retailer hasn’t blocked swiping/the thief has access to a swiping card reader.
Its very fun getting a turtle notification too.