So it follows that a lot of people who register to buy something might enter the same password they use to access their PayPal account.
Thus they've just given out all the information necessary for the people operating that site to access their PayPal accounts.
Dangerous!