@thesquirrelfish @MarkSquiresWine consider also if the company doing the ACH debits gets hacked you can do all sorts of fun thing with that information, like using the account to fund stolen credit card accounts because credit card companies don't do any extra authorization when you add an ACH as the funding source