There are many flows that permit direct debit, and that may not have the strongest authentication or protections.
If you want to test, post your bank details here!
If you want to test, post your bank details here!
Having an automatic credit card payment is something slightly different though.
The article ends with him saying "I was wrong and I have been punished for my mistake" but this is just his schtick, it's factually incorrect.
I live in a small community and many local charities and non-profits post their bank info online, so that people may make donations by bank transfer or standing orders. Fraudsters periodically manage to trick the local banks into transferring money from the charity accounts and everyone freaks out, which is complete bullshit. The banks always restore the funds, and scold the charities for having this info online. I've experienced this myself at two different organisations. As a result charities become more reluctant to publicise their bank info and predictably, donations lessen.
It's important to keep perspective and hold the responsible party accountable, instead of trying to compensate for the bank's failings.