I wonder what would have happened if this was left on auto pay.

and why didn't the FDIC catch this ? it would make the financial institution pretty defunct if they authorized the transaction.

this limits your future scalability

you want to capture more rather than less so you can use this data as training for future functionality.