What secret code are you referring to? To do a direct ACH transfer to someone, you need only an account #, and that's not a secret since it's on every check you give out.
Is this also true the other way around? Seems like security can be lax when depositing to an account but should be much more strict debiting from an account.
Since these charges can be reverted by the customer this system works by thoroughly vetting the debiting company and ensuring that it is able to repay the funds owed from these 'chargebacks'.