I have to correct myself. Bitcoin doesn't need merchant protection, because transactions are irreversible. Paypal can provide buyer protection, i.e. chargebacks.
They first have to get confirmed and that can take a long time on BTC. Replace By Fee offers another attack vector on transaction finality.
Other than those two very important points, I completely agree with you.