Comment by tadfisher

Unfortunately, "ACH authorization" is a collective delusion, as there is no technical mechanism in the protocol to prevent ACH pulls.

Better to use something like a Privacy card in the first place so you can revoke it on your own terms.