PayPal allows vendors to sign me up for future automatic (ie unauthorized) charges, without asking or receiving my permission. This is almost as vulnerable as giving them my credit card number and the PIN isn't it? I think PayPal should require MY approval before putting someone on my list for pre-approved future purchases. The most frequent offender in my case is Avangate (Bitdefender antivirus), who repeatedly sneaks this in, and renewed my subscription against my will; but the most outrageous one is Catholic Relief Services, who signed themselves up to take future $500 donations from my PayPal without asking me. I gave a 1-time donation for Hurricane Maria relief in the Caribbean, and without ever asking me, they signed me up as a pre-authorized account in PayPal, and PayPal let them do it. I think PayPal should be more careful with my online account, and require my personal permission before signing up a preauthorized vendor. Then when I challenged PaPal about this unauthorized auto-renewal, they correctly said it is "not unauthorized", because PayPal pre-authorized it! How many times a year should I check my PayPal account for these complicit scams?
