I received this email recently and was really pissed about it. Other sites like Amazon require opt-in and PayPal decided it could just enroll me. I unenrolled immediately because regaining MR from unauthorized access might be harder than fraudulent charges.