A couple of points here;
More secure methods (ie, Tokens, one time pads, mobile based authentication) are less about securing the user, and more abut shifting the burden of responsibility onto the user from the bank. Chip and PIN is the same. Regardless of whether it is more secure, if someone skims your card, and empties your account, the bank can point to its new, more secure (in theory, anyway) system as proof that it must be user error.
Second point is that things like mobile authentication *look* more secure, but are not immune from breaks.
Bruce[/url] Schneier is (as ever) excellent on this sort of stuff (don’t forget to check out Schneier Facts[/url]) as is Avivah Litan.