Here in the Netherlands we have 2 factor authentication on all bank payments and most credit-card payments. The two-factor here works with a token-generating device in which you have insert your card and PIN. The only exceptions are unsafe US payment portals that don't support the two-factor triggers properly, but that is just for CCs.

I lived in the US for 6 months and was surprised to find that my American collegues found it less safe to use a bank card (with PIN) than a CC. Their arguments were that 'if someone gets your card AND PIN, they can do anything' as opposed to someone stealing JUST your CC and then he can do anything... Yes seems much safer.