I think the credit-based system is the best compromise. It's even better if the cusomer can explicitly opt into an automatic top-up option, where they're automatically billed when their balance falls below a certain threshold. This is even better than the bucket model, as those who want their service running at all times won't risk running out of what their bucket offers, whereas those who don't want to control how much they spend can do the top ups manually.