I may be wrong, but from what I understand they are not directly responsible for covering the fraud. That burden is sent downstream to banks and merchants. If they had been held responsible we would probably have a lower rate of frauds. They don't even enforce 3D secure for all countries.