If your CC is stolen, you are not out all the cash in your account until the dispute is resolved.
If your debit card is stolen, you lose that cash, making it more difficult to pay whatever other obligations you have that period.
But the more concerning fraud is when you purchase something and don't receive what you should have received from the merchant. Whether it is due to outright fraud or not. In these cases you will also have your money reimbursed by your credit or debit card.
This may be what the letter of the law says but this isn't reality. Using debit puts you at greater financial risk.
What how? Surely the US populations credit card debt dorf even the global populations debit card fraud numbers. So while my whole family in a combined 200 years of adulthood have indeed lost some 1000 euro total in fraud, it's not thing compared to the average Americans credit card bills.
I'd rather risk the street criminals with my debit than the suit wearing ones with their credit.
With a credit card, if the card is compromised, its not my money being stolen - its the card issuer's money from my line of credit, and they were planning on settling up with me when my monthly statement closes. I still have to launch a fraud case with the issuer, but critically, _all of my money is still in my bank account_ and I can continue to pay my other bills and obligations as normal.
I think its reasonable to consider giving up that buffer to be additional risk for the debit card approach, setting aside any other advantages or disadvantages between the two.
Your bank lacks proper security protections then. Here most banks have limits on debit card transactions. If you want to do a very large transaction, you have to increase the limit for a short time period in your banking app, and there is a delay of a few hours (they'll warn you when the spending limit is increased).
IANAL, but also consumer protection is much stronger in Europe. E.g. in NL if you stick to 5 basic rules, which are sensible things like not intentionally giving away your banking card or PIN code, the bank has to refund stolen money:
https://www.consumentenbond.nl/betaalrekening/bankvoorwaarde...
Just a quick Google... Wells Fargo's policy is 10 days to either case resolution OR provisional credit. I assume that's typical for American banks. For somebody living paycheck to paycheck, 10 days is a long time to go without access to what little cash they might have.
Not to mention the per-purchase (online/in-person) limits, mandatory PIN entry, and daily maximums...
I've never had a web shop use an API to deduct from my bank account - the closest thing is PayPal, which as far as I can tell is basically ACH under the covers, just though an intermediary. Pretty sure more Americans use their CC or debit card for online shopping.
But even if it were - most people operate one checking account, and most folks don't keep an especially large balance. If your debit card gets compromised or there is an erroneous charge, it will process up to your balance. It is incumbent on you to notice the fraud and take action. If the bad dip is today, and tomorrow morning my mortgage and other payments bounce or hit overdraft, I have a mess to clean up.
With a credit card, you're typically hitting a larger credit line that isn't fully utilize -- you may not notice the bad charge for a month, but there's no impact to you... the thief stole the bank's money.
Also how would someone misuse it? You need a PIN Code for every transaction anyway, and the EMV Chip can't be cloned like Magstripes.
Online Payments need a mandatory 2 Factor Authentication
The text on that link of yours is sneaky though:
"...you MAY be asked to..." (Emphasis mine)