The US is just so backwards on this. a) You can still run transactions as magstripe-only transactions (without any PIN or even signature required) or b) copy

The US is just so backwards on this. a) You can still run transactions as magstripe-only transactions (without any PIN or even signature required) or b) copy the security code (which on most American cards are also encoded on the magstripe) and use it online (CNP transactions). If you're familiar with 3D secure, most American banks and merchants don't require 3D secure to buy.