Because SPI is clocked, and the slave-select line delimits ... If you’re using an SD-MMC card, or if all else fails, or if you’re just somehow superstitious, you can try adding pull-up ...
As for 1.8V rail, she ended up tapping the 1.8V power pin of the SPI chip the motherboard itself ... Use your Pico as a POST card!