Apparently much of these protections are already in place, working quietly behind the scenes so there’s no need to worry.
I remember seeing elsewhere in the forum that an account holder had a fraudulent transaction sorted out for them while they slept.
Your last point which is regarding 3D Secure payment authentication does make sense to me. It’d be a modern and user friendly approach to an already existing standard.