What I don't get is if they're so interested in security, why are they partnering with companies who don't support (or at least, don't require) 3D-secure?
You bought that "for your security" garbage? All the changes have been made because of the charge backs, its so they don't lose any many from peopel abusing that.