Security code / 3D secure is not mandatory. It’s in theory enough to make a purchase but will be flagged for potentially fraud very often.