Your PIN is actually checked locally by the card before it signs the transaction. Sure, you're vulnerable to a POS system stealing your PIN, but they can't really do anything with it unless they also have your card's private key, which is pretty much impossible to get off the card without destroying it. This is a huge improvement over what it was before, where you only had to copy the mag stripe info to clone the card.