Why is my wife being asked for the credit card security code when I have a gift card on the Family Sharing Account?

I have set up our family on the Family Sharing account. When my wife tried to purchase a song it asked her for our credit card security card. It was my understanding that the order of charges was credits first, then gift cards, and credit cards last. Is this correct? If so, then why was she asked for the code?