I think a user name should be a good security for Paypal account owners. Using emails as a way to get in your account can really be a hindrance in terms of spams. Like all the posts said.
id canot be hacked so easily as they also required password to log into our account! noone can hacked it so easily, to prevent being hacked always remember not to disclose your passowrd to anyone and also always scan your computer with good antivirus and anti-spyware programs to remove programs like keystroke and others to prevent your business account from being hacked
Anyway you can put it, if PayPal can't offer much safer security, I guess it is also up to you to protect yourself and your personal information. Always try to equip yourself with protection like anti-spyware and anti phishing softwares.
The thing that i have read is that most people put there password as "password" or "p@ssword" which makes it really easy for a random guy to go through a bunch of ids checking those types of passwords and he is bound to get into a bunch. Use a secure password and you should be fine.