There's no inherent information risk to giving out an account number that justifies an outdated paper-based system. Especially when one considers the accompanying fraud risk thereof.
The instant I moved to Europe, I realized just how far behind consumer banking is in the US. It's pitiful.