Especially when the card providers move the risk, and therefore part of the cost of the transaction onto the bank. It's up to the bank to make 3D Secure, secure by authenticating the user in it's own way.