Either you get hax0red or paypal can F you over. When you signed the terms of agreements you basically gave paypal control over your bank account if you linked it. If someone disputes charges or whatever and they lock it, they can basically take all your money out at will with no recourse available to you. No appeals no nothing.

Lesson is: put in your paypal account only the amount you need to complete a transaction, nothing more.