My thinking was, if a friend confide in me about their use of PayPal for online payments, then it's a moral obligation to inform them of the risks their taking and treatments available such as alternative providers.