Disturbingly, this is even more dangerous than them storing credit cards on their servers, since the MCX system uses raw bank account information. If you think it's bad dealing with reversing charges and changing numbers when you get a credit card stolen, try dealing with ACH fraud.