You're correct. From my understanding, most issuers have determined that Chip and Signature is secure enough for the US market provided they support DDA. Both of my EMV cards do not even provide a way to create a PIN for them. It will most like be this way for a year or two.