yes, it is possible depending on timing (if a card is authorized but captured later in the day or the authorization was less than the capture, this is why gas pumps do auth for $100 and hold that for days till it clears), but the risk is more about expected/scheduled transactions hitting the account before you realize it got drained
I guess my bank accounts have never had an overdraft function. If there aren't sufficient funds in the account, the debit card transaction/withdrawal gets denied, no matter who is using or misusing the card.
