It gets worse too - once I moved and wanted the withdrawals to stop, my own bank claimed there was no way they could stop them, only the withdrawing bank could cancel it. Of course I wasn’t a signer on the strata account as I was no longer a resident, so was completely reliant on them to stop.
Legacy features doesn’t even begin cover it. Those people that keep all their money under their mattress aren’t quite as insane as you might think.
There are two things you can do, however: one is request your bank set a default ACH block, and the other is to create a sub/second account from which you do all your ACH transfers for utilities and whatnot. It's a bit of an extra hassle (unless your bank allows for scheduling automatic transfers; many do) but it assures that stuff like can't happen. I've done it for a business that took paypal payments, specifically to stop paypal from being able to yoink back funds a month or two later. Within hours of a payment coming in, I'd transfer it out of the ACH-linked account into the business's main account.
It’s true though. This was essentially the plot of “catch me if you can”.
You might enjoy looking at how things were done before the internet existed, because all the stuff that you do with the internet also was done before just in a different way.