Why PayPal’s BNPL expansion could be tricky