1. 14
  1.  

  2. 1

    I get the general sense that PayPal doesn’t do a fantastic job at QA or security, though I respect that they have a bug bounty program.