American banks have continuously made a conscious choice to ignore more secure designs (one-time passwords, signing transactions, push-based methods of sending

American banks have continuously made a conscious choice to ignore more secure designs (one-time passwords, signing transactions, push-based methods of sending money rather than authorizing someone else to pull it, etc) because it is cheaper to eat the fraud than to revamp the payment networks. This is only now changing with the advent of Chip + Signature, with a tiny portion of stores now accepting it years after the deadline.