I don't understand the face palm in your edit-- the footer says legit emails include your full name and the email you have, which is NOT legit, doesn't have a name... why is that a facepalm? Sounds like whatever Paypal is doing to put your full name on legit emails is working.
EDIT: I mean obviously it would be better if they didn't have scam emails coming from their servers at all, but at least that part of their security seems to be working