Secrets designed to be divulged and other payment oddities (opens in new tab)

Why is the security of the modern financial system still built on "shared secrets" like CVV codes and billing addresses?