You open an account somewhere and when you pay they sneak in consent for direct debit with some dark pattern.

there are notifications and approvals in bank apps now, they can't take the money until you accept there too and you can revoke from there as well

i don't want their mobile app

do it on the website then?

or dont do anything and direct debit by default doesnt work