I'll take the CC please!
Likewise, a PIN-protected Bitcoin hardware wallet is reasonably pretty secure. You would need a thief with professional equipment to decap the secure chip to access data in the EEPROM that would otherwise be PIN-protected. I would trust this any time over the merchants systems which routinely get hacked over and over.
Also it's quite common for people to give their pin to thieves it happens at ATM stick ups all the time. The difference there is in cases where they are forced to withdraw money they aren't liable(it's considered the bank being robbed not them) and in cases where the thief takes the info and runs they can call the bank cancel the card and not be out anything.
The consequences of failing to secure a merchant system are that I have to get a new credit card and maybe click the "dispute" button on my bank website a couple times.