Actually I'm fairly sure it's only legal for them to hold you responsible to ~50 dollars in case of ID theft. Don't you think the CC companies would want to make you liable? Of course they would.
The T+C of the card claims that since you must have revealed your PIN to somebody it's your liability. Until there was a massive public outcry.