Heh, no, I think we were haggling over where the "bottleneck" is in terms of the transaction limit. (at least here in Canada, it's the merchants that dictate the limit).
Yep, different countries, different limits and primary limit sources.
The token that Apple Pay sends SHOULD be equivalent to chip+pin authentication as:
1) Verification / authentication was done with the banks at time of setup of Apple Pay on the devices
Sure, although it's not really the same. When we register a card that was mailed to us, the issuer is expecting our call to enable a new card from our known home phone.
Registering for Apple Pay is different. It can happen at any time, and from a device the issuer could easily be previously unaware of. Which is why, at first, thieves took advantage of this relative anonymity to register stolen cards, and reportedly cause millions in fraud purchases. Later the issuers bolstered their verification methods to account for this difference.
So, just noting that the verification has to be a bit more rigorous than how it's done for a regular card issuance.
2) Apple Watch via PIN/constant contact and iPhones via PIN/Fingerprint are equivalent if not more secure.
Yep, although same as with a PIN, a device-registered fingerprint verification does not guarantee that the user is the actual cardholder.
Actual user-to-fingerprint verification would require for the fingerprint to be registered, say while at a bank, and then locked into the device so it could not be changed. And since fingerprints can be faked as well, it'd be even more secure to ask for photo id. But who wants all that? Too inconvenient for all sides.
The point is, no currently used method is really secure. However, they're considered "good enough", especially if the convenience to the user is high, which allows for more purchases
--
Personally, I sometimes prefer less security, same as now. There's times that I physically loan a card to my wife or kids or even babysitter... and it's a lot easier to do that with minimal security. No PIN needed. No fingerprint set up needed. And I'm covered in any case. Extra security is more for the benefit of the merchant and bank, IMO. (Yes, it can be inconvenient to have to change account numbers, but that's nothing compared to taking a loss like stores and banks do.)