What does it mean by ‘security code accepted’

I really hope that it doesn’t mean that they’re keeping the security code on file – after all that’s a violation of the PCI