Agreed - there are some very, very good phising emails out there trying to get paypal accounts. I got one once about a phone that I supposedly bought and I was completely ready to get on paypal and dispute the charge, but something seemed off about it. Turns out the email had nothing at all to do with my paypal account and was a really sophisticated attempt to gain my info. It almost took me in and I consider myself pretty saavy about that kind of thing. They made me mad and that's what almost got me. I was ready to charge right in and dispute the purchase. I'm glad I spotted the scam before I did anything.
I can't really blame paypal though, they do all that they can to make their site secure and its up to us to be sure to watch for phishers.