I like that I can pay this bill online, but I don't think it should be possible to make a payment just by a routing number and account number. Anybody to whom I have written a check in the past could have that information. Your system now has that information. Usually, when one sets up direct deposit, or anything else like this, there is a confirmation step to make sure it's you and your account. This system is not secure, and you should no longer use it.