At the minimum they should be required to provide the same exact means to cancel as they provide a means to subscribe. Business models that involve easy online subscriptions but require calling an 800 number during business hours to cancel should be fined into insolvency
Sure, one click....that's on a hidden div, that can only be accessed if your mouse does a very particular movement, one that mimics what you did during sign up.