If both the CSC and AVS match, does this mean the payment is secure?

CSC and AVS are extra measures of security merchants can use, however, a match doesn't guarantee payment. CNP (Customer Not Present) transactions still hold the risk of chargeback. A chargeback happens when a transaction you've initially received payment for is subsequently rejected by the cardholder or issuer and debited back from you.