Anyone else think it's crazy how bad PayPal account security is?

Specifically referring to logging in via one time codes.
It's a feature that is enabled for all users and you cannot disable it.
Every single PayPal user is an easy target for SIM swapping.
Most organizations consider SMS 2-factor as unsecure and require actual authenticators, and that's fucking 2 factor, at least in that scenario the attacker would have to know your password first.

Hopefully business accounts aren't forced to use this feature...

Anyways, for all those who use PayPal, …

account account security authenticators bad cybersecurity easy factor feature logging logging in organizations paypal security sim sim swapping single sms target