How would expect them to do it? I can’t see how they wouldn’t link to you card if you expect to spend money. Moneys got to come from somewhere. Auth tokens are the safest way of doing that, prior to them upgrading to that it was done through ACH, which is not only slow, it’s much more dangerous for the user since they have actual checking acct info. Auth tokens don’t work that way, and even if there was a breach, your checking acct info isn’t there, only a token they can’t use. The way they’re doing it is the smartest way for both speed, and your acct safety.