I never understood how it works in a bank. For one e-commerce purchase, my bank may send me an sms code to approve even minor amounts. But for the other it may not require that even for substantial sums. I think that some banks have this functionality built in, but it's the seller who decides which one to use. That is strange. As a result, I'm using a virtual card with a tunable limit for all less trusted services. Anyway, legal issues still apply. Adobe basically tricks users into a year long, autorenewable loan contract here, and that has nothing to do with their (in)ability to grant payments. It is a law that allows these terms is insane, not banks.