A while ago, I had a landlord who withdrew rent directly from my bank account[1] and who kept charging me rent after I had left. They also refused to return the money to me and insisted I file an ACH dispute through my bank, Simple. I was responsible for rent for me and my roomate, so being double charged rent for a month meant I was suddenly short two peoples' worth of rent. Simple was super, super good about the wh…
Not sure what you mean by a 3rd party, but just a reminder that every check you spend contains all the info anybody needs to pull out arbitrary amounts of money from your account over ACH in the future. So if you've ever "payed manually" with a check, even if you've never set up automatic rent payments, your landlord could still do the same thing if they wanted to.
I find it infuriating that no financial regulators or banks have ever bothered to address this. Mailing a check is basically equivalent to sending your login information over plain http to a site that doesn't even hash passwords in their database. And the stakes are even higher than they are just about any online account you might have. But we're basically forced to do it all the time.