Insecure in spades
Earlier this year a new credit card arrived.
I knew what it was as it lay on the mat - you could see the outline embossed on the envelope. It was deliverd by ordinary post, and there was no receipt validation procedure.
Shortly afterwards I went into a caff (called itself a coffee house) spent £15, and handed over the card to pay. The assistant bonked it without asking me, and it was accepted.
So that card could easily have been stolen before it reached me, and used an unknown number of times before asking for the pin, at £20 (soon £30) a pop.
I have raised a formal complaint with my bank over how insecure the system is, but I am not optimistic about getting a useful result.