PayPal gets rid of its only good feature. Am I missing something, or are PayPal opening the gates for hackers to inject malicious code into third party websites

PayPal gets rid of its only good feature. Am I missing something, or are PayPal opening the gates for hackers to inject malicious code into third party websites and steal user credentials? I'm making the prediction right now, that they'll quietly remove this security atrocity after the first year of exploits.