Earlier quoted context omitted.
I would be in favor of a different approach: a merchant should not, under any circumstances, be able to remove money from an account, charge a credit card, or otherwise take money from someone without the explicit authorization of the customer. In this context, explicit means one of two things: 1. The customer intentionally authorized that specific transaction. A specific transaction means one transaction. If a merch…
I think the explicit authorization is the contract you sign that allows for the subscription. It's already pretty risky to loan people money, and your system makes it even riskier. (Consider the business model of cloud providers; you agree to pay for whatever you use, and then they charge you for last month's usage. If you could just not pay, then the business wouldn't really be viable. You'd have to figure out what…
Attacking the latter might make a large difference even if the former remains unsolved. The New York Times can get away with making cancellation difficult because they have the power to unilaterally take money from their (former?) customers. But, if anyone could trivially revoke their authorization to charge them money, I doubt that the New York Times would actually try to sue or collect from their customers en masse. Sure, they could try, but that would be a fantastic way to piss everyone off and to recover very little money.