CVC ... is that really the best security advancement they could come up with after X decades?
Discussion
No. It’s been superseded by SMS 15 years ago, then TOTP using hardware at least 10 years ago, today biometric through mobiles for a few years (France & Japan at least).