Very true. As to your bank's security, all they have is FDIC. The security systems vary, but are all quite strong. In reality, Mint.com probably has the best security out of any of them. Rightfully so, of course. But yeah, I pretty much only use a CC on paypal. If PayPal won't help you get money back, your bank can only reverse a transaction within 30 (maybe 45) days by law. Meanwhile, your CC company can take care of you quite easily.
But if you want to keep being paranoid, I suggest you read this frightening article from Ars.
http://arstechnica.com/security/news/20 ... -users.ars
It will never end...