How often does your bank flag your transactions? I’ve been called once in a decade to authorize a tx.
And online, the validation/authorization isn't any better - as long as somebody has the card number and my zip code, they can do as they please (until/unless some banking anti-fraud algo picks it up).
Before that they sent an SMS code, I much prefer the app notification.