The email address that you log into your paypal account with identifies that account and is all someone needs to send you an invoice.
As for protection that depends on MANY factors all listed in Paypals buyer protection policy for you to read so you can risk assess your transactions. Legal (bottom right of Paypals pages) > user agreement > buyer protection.
Advice is voluntary. Kudos / Solution appreciated.