Cash advance apps structure loans as non-recourse advances, and users can revoke ACH authorization in writing to prevent apps from debiting funds, creating a regulatory arbitrage loophole.