What i think in this thing paypal can't do anything if some body succeeds with the password but it is good that paypal supports in returning the money ,this is the important thing.