On the consumer side, I'd much rather use PayPal than put my card number into a potentially dodgy site. Protects me quite a bit, and with a easier UI.
If I can't PayPal or Apple Pay, I've at times gone elsewhere.
If I can't PayPal or Apple Pay, I've at times gone elsewhere.
I've yet to see any bank in the US implement such a thing.
Citi, Discover, American Express, Chase, and my local credit union all lack such a two-factor setup for charges.
(I also get to skip entering card and billing details every time. Given the number of sites that see fit to use a special non-standard widget for the state field, that saves me time and annoyance on every transaction of this nature, too.)