I never understood how it works in a bank. For one e-commerce purchase, my bank may send me an sms code to approve even minor amounts. But for the other it may not require that even for substantial sums. I think that some banks have this functionality built in, but it's the seller who decides which one to use. That is strange. As a result, I'm using a virtual card with a tunable limit for all less trusted services. Anyway, legal issues still apply. Adobe basically tricks users into a year long, autorenewable loan contract here, and that has nothing to do with their (in)ability to grant payments. It is a law that allows these terms is insane, not banks.

Ironically it's done for user convenience, so that you don't need to automate the periodic payment yourself.

This is pretty much as SEPA direct payments work, except the grant is reversed.