The way that payments work through SEPA is that the merchant pulls the money from your account. Legally they require a "mandate" - this can be as little as a handwritten signature on a document.
Security is essentially provided by easy reversal and strong penalties for abuse.