Indeed, i'm glad i'm not the only one thinking this is a bad thing.. Without the URL bar, there is no direct way to be sure the form isn't fake.. before you know it, many many PayPal accounts will be comprimised..