Yes , you need to be careful for trojans, but if you take very basic precautions you will not have your account hacked. I have had my account for years and know many others too with accounts, I do not personally know anyone with a hacked account.
But yes people's accounts are hacked, just as their pp, Bank and Ebay accounts are hacked aswell.
With pp, yes you withdraw the money ASAP, but if there is a chargeback, you have a - balance, so you need a new account, and to keep getting new pp accounts is not straight forward. When you have the pp linked to a Website Shop, you cant watch it 24 hours a day to withdraw the funds as they come in either.