Wondering why I didn't need to enter my card's CVV number was probably the first hint that there was a usability issue afoot in this checkout flow.