Comment by rvnx

At least basic encryption. Remember one day, Dropbox forgot in production to check passwords of users. So you only had to enter email to access the Dropbox of the user (an open "log as" feature).