This is how PayPal has worked for over 10 years. It's not that big of a deal. Tampering with the form fields is discouraged both by law and by the ease of confirming either programmatically or manually.