Part of the problem it could be argued is the CC card here - you want my CC number? Fine. I should have to initiate the transaction, hit "Go", not the other way around.

I can block charges, but this would be a more valid reason if it really were just about limiting "freebies".

Actually for this reason I prefer to use a small account with limited liability e.g. Paypal or a low limit CC, precisely because there's less risk for me. Why should company XYZ have unlimited power to randomly charge me tens of thousands of dollars? They shouldnt.