I just switched the bank account associated with Paypal, to one that I don't keep any money in. I have heard too many horror stories. I will still use Paypal, but if something goes wrong, there is only so much money they can get.
And to everyone who is wondering, "How did they get my CC number?" -- they don't need to - they can make up numbers until they hit on one that works. And that one might be your number. The wonders of our modern age.