you've apparently never had someone double dip in your account.. A previous mortgage company took out 2 payments once, by mistake.. it took acouple of weeks to get it resolved. Initially, they didn't want to give me a refund, just cover my next months mortgage. Unfortunately, I wasn't making enough to take that hit in my checking account..

They eventually sent me a check (why not just deposit it back) and paid for the overdrafts that hit my account. I use Bill pay, but I push payments. They don't pull automatically.

These topics resurface every few weeks....its like the paranoid vs the smug.

If you understand the risks and issues and chose to do things differently, then fine. If you chose to build a RADIUS server and use a RSA token just to check your Netflix account, then that is cool too.

The OP asked about how to be secure in certain situations and there are several good answers on this thread.