If somebody steals your card and PIN, they can easily drain pretty much as much as they want from your bank account, up to whatever your bank's daily withdrawal limit is
In my (Norwegian) bank, I can define my own withdrawal limits on my cards.
I also have a separate bank account with no cards "attached" where I keep most of my monthly spending cash. If I need more available on my card I just send an SMS with the amount I want to transfer from my "safe" account to my "card" account. Takes about 3 seconds to get the money there and only costs me a few cents.
So, I'm never worried about drained accounts.
That said, my bank will cover any fraud unless they have strong reason to believe I've been negligent protecting the PIN code.