but you wont be liable for them unless they are delivered to your home address
and now, you have passed the two factor authentication
I can only repeat PP seems to have neither of these checks
then the risk lies with the retailer
no
they just perform a chargeback