Almost everywhere else in the world, physical cards require a PIN, and online payments (above some amount/risk threshold, at least) require 3DS authentication.

Both methods are pretty secure.