[binsquare]

Agreed on the yikes here - this should be a high priority issue from paypal's side to address.

This seems like a HUGE loophole