There is no point in getting more security on payments as they are insured by your bank. At least that is how it works in the EU. So effectively for you as a customer there is no real benefit, you are just volunteering for the bank’s security team.
I think this is actually a toxic change of responsibilities. Banks and the payment industry (mastercard visa consortium) make quite terrible ways to authenticate online card payments with shitty layers like 3D “secure” still with static ceditcard numbers. Why is that the customer’s problem now? The industry should move on and authenticate transactions in a completely different way, not with card numbers, but by authenticating a transaction by simply signing in to your bank account. I really never understood how we ended up using cards for online payments.