Don't know this for sure but I think the extra security might have to do with CX's ccard booking system. The online booking system pretty much take ccards from countries all over the world. That could lead to frequent ccard fraud.

Compare to AA.com, they only allow ccards from certain countries (USA, Canada, UK and most countries in South America). Unlike CX, I have never been asked to show my card by AA when checking in.