There’s additional tools for e-commerce transactions like 3DSecure (step up authentication like an OTP) and passive identity verification tools.

The US uses chip and signature, no joke, because the banks didn’t think people could remember another PIN.

This is an EMVCo chip card, and not an American one so it’s chip and pin most likely. Without getting too detailed, the chip generates a one time use code for each transaction, so just having the number wouldn’t help with cloning the card plus you also would need to know the PIN. Although skimmers still exist and physical card theft is a thing, it’s less common especially in markets that use chip and pin.