> Everybody with access to, or capable of guessing, your account number is capable of "access to your checking account".

No, ACH authorisation is an entirely different matter. I could agree to show you the check I wrote to my landlord, but I'm not willing to give you my check book with my signature — and no other data — on all the blank checks.

ACH authorisation is an analog of the latter, not the former.