you have it backwards. 3d secure is not protection for you. it's for the merchant. it protects them against chargebacks. the merchants decides if it enables 3d secure or not, transaction by transaction. Most of them are using an external fraud risk assessment service. Accertify is such an example.

> All banks I've using have strong 3D secure.

I've yet to see any bank in the US implement such a thing.

Citi, Discover, American Express, Chase, and my local credit union all lack such a two-factor setup for charges.

Biometric approve sounds pretty cool, but I'm personally not going to install some untrusted proprietary app to find out.

Cool, but mine doesn't.

It's not zero risk; changing my card numbers after a compromise is an annoying process given the number of places I have to do it. Not having to provide that number to the random e-commerce site I'm trying to buy something unusual from is helpful, and reduces the risk of me having to spend an afternoon making sure I switched cable, internet, Github, Patreon, Heroku, kids' school lunches, music lessons, and fifty other recurring payments over to a new card number.

(I also get to skip entering card and billing details every time. Given the number of sites that see fit to use a special non-standard widget for the state field, that saves me time and annoyance on every transaction of this nature, too.)