Yes, PayPal is pretty nice. It adds an extra layer of protection between the consumer, internet, and merchant. Of course, if the PayPal site gets hacked there'll be hell to pay but I would imagine they have more stringent security than the average merchant site. A lot of sites don't use PayPal because their eCommerce solution can't pick up the credit verification from PayPal. A lot of carts just have hooks into Verisign, Cybercash or whatever. It really isn't a tough thing to add if your shopping cart isn't a black box though.