This would have been "splendid" back a few years ago when my email was compromised.
Paypal thought a couple $400 payments to someone somewhere in Africa was totally normal for me.
Got the CC company to fix it eventually. Weird that they had to let the fraudulent charges go through before they could do anything.
Changed emails, much stronger passwords, added 2fa.
Week later....
2fa question came through at 3 AM. With a one hour window to deny.
Again PP wouldn't do anything.
Neither Ebay or PP is trustable. And 2FA is worthless.