[j_jochem]

>The problem with credit cards in Germany is that they don't use 2FA. It's the same old signature system. Even online transactions don't require 2FA.

This is not generally true. My credit cards use PIN when the terminal supports it and only fall back to signature when used with older terminals.

I've never heard of online transactions with 1FA auth, most banks use a combination of user login and challenge-response TAN lists or mobile TANs. Special hardware devices that require you to insert your debit card, enter a PIN and have the device read a code directly from the computer monitor using photo diodes are quite common, too.