Aliexpress debited money from bank without any security check. Is this safe and legal?

The Fact

its a foreign transaction(international),so there is no OTP/PIN.

Its between you and your bank there is nothing to do with aliexpress.

if you feel insecure you can ask your bank to block international transactions.