I've had people steal my credit card info (not the card itself) and proceed to run up $16,000 in charges. The credit card company just took care of that for me, at zero charge to me other than a bit of time. Until Bitcoin can offer that kind of protection, it will always be a niche currency at best. With Visa/Mastercard, I don't have to trust the site I'm on. I can spend money without thinking about it, because they've got my back. THAT is why they get their 2-3% from merchants, which the bitcoin community generally seems to fail to understand.
And who do you think had to pay for the $16,000?
Did you have to pay it? No
Did the credit card company had to pay it? No
Did they get the money back from the criminal? No
So where did they get your money back from? They stole it back from the honest merchants who though they could trust you and your credit card.
They didn't "steal" it from anyone. The contract the retailer signs with the merchant bank that lets them accept credit cards spells out whose responsibility it is. If you don't like it because you want to put the burden on customers, well, that's your issue, but good luck building a viable business beyond the tiny scale.
Credit card companies and merchants agree up-front that it is the responsibility of the merchant to verify that the person using the card is the person who owns the card. Of course, merchants are going to get ripped off. We get kids using their parents' cards. We get fraudsters buying digital goods (so no delivery signature is required) with stolen card info. It happens. It's a cost of doing business absolutely no different than the similar cost that restaurants have for broken dishes or corner stores have for shoplifting.
In my case, the merchant was Home Depot and they paid for it because they obviously did not verify that the person holding the counterfeited card was me. Whether you think that's fair or not is pretty irrelevant. It's the effect of the legitimate, contractual agreements Home Depot, Visa, and myself variously have with each other.