Don't think they ask for banking username and password. They only state they will directly debit it from your account, which does not require sharing your bank credentials. All you probably need is a one time authorization for them to be able to debit.