Why is checking my email more secure than paying for something online? Why are we still using usernames (credit card numbers) and maybe a 14 bit password (pin)?

Why is checking my email more secure than paying for something online? Why are we still using usernames (credit card numbers) and maybe a 14 bit password (pin)? The merchant should give the user a signed request for money, which the user's account signs and the money is transferred.