Yes, SSL is secure. The weak point is not the protocol but the user--ie, if some hacker obtains your Paypal password through a trojan, phishing scheme, or whatever means, his access to your account will be just as secure as yours. Making sure your computer is malware free and avoiding using computers that you're not sure about for anything but casual surfing and never clicking on direct links in emails will help out a lot on the user end of the equation.
