You can do this in the US. ACH only requires the numbers (account + routing) that are visible on every check we write.

Yes but if you are caught doing unauthorized ACH transfers it's not going to be good for you.

In the case of monthly bills and related things, you authorize them once. Don't know what that looks like at the backend and what controls there are but utility companies and the like can absolutely debit money on an ongoing basis.