I’m definitely curious what other folks have to say about this, but if you’re worried about having your org’s general account information floating around, could you open up a separate account just for incoming ACHs/wires? It would be a little more work on your part to transfer the money to your “main” account, but that way, if someone tried to make an unauthorized transfer out of the account, there would (theoretically) be a much smaller amount of money in that account as compared to the “main” account.