Did you forward the original message to "spoof@paypal.com"? The way I read their response, it appears that you sent them a message stating that there was unauthorized use on your account.

As I read it, they are looking to charge you, but rather that if your account was used by someone else, and if you file a claim and paypal agrees that your account was "hacked", they will pay back the illegal charges.