Thanks for letting us know! I ordered mine last week and just got it a couple of days ago. Now they just have to work on Apple Pay and they'll be golden
That's an OLD paper, and is what I meant by EASILY patched. All cards being issued in the US will use online verification, which addresses all offline verification vulnerabilities. iCVV addresses skimming the chip to produce a magstripe card for use at non-chip merchants (and Walmart with an insecure chip implementation), as mentioned in the paper. Magstripe fallback is by design, it's up to issuing banks to decline these transactions - not an EMV design problem.
Those vulnerabilities are not, per se, in the EMV design but rather are a result of exceedingly poor implementation. And yes, companies are still rolling out scarily insecure EMV systems (see: Walmart), but that doesn't mean EMV is "hilariously broken" - it means that it isn't nearly as secure as we hope UNLESS merchants and banks wise up and start implementing it in a more secure manner. Decline fallback transactions, actually CHECK all the data that is available to them, etc.