You can still turn off international and/or online transactions separately. It's mandated by RBI. Ideally people should have a separate card for using on international sites with all other transactions turned off and one for domestic sites with other things turned offI don't know much but I have seen many foreign sites which do not need otp