Mine was untouched for upward of 5 years when someone used it to pay me back for shipping them something from Japan. I worried it would bounce or, worse, be received and then inaccessible.
As it turns out, the funds landed just fine and the account was accessible. The only problem is that it won't let me verify the account because I don't have a US billing address credit card anymore. Even if I did have a US CC with which to secure the verification, I don't think I want to give PayPal my CC number. Their customer service is legendarily bad, they pretend to be a bank but don't have any of the protections or limitations of a normal bank, and as Demi pointed out anything can be phished. Most of the hacks you hear about, the big leaks, start with a bit of social engineering. Tricking someone working phone support is just not that hard.