Sounds like the big issues are at the compliance level. They’re in a time of the year where lots of companies have much more limited availability of engineering

Sounds like the big issues are at the compliance level. They’re in a time of the year where lots of companies have much more limited availability of engineering, management, and legal staff. Sure they could easily eat the cost of temporarily upgrading the Dropbox account. But as OP describes, there are huge implications in terms of security. They didn’t find out until today that a number of senior staff were laid off during the acquisition. Lots of room there for bad feelings. That opens them up to all kinds of vulnerabilities from disgruntled ex employees. Imagine the repercussions come post-holidays if something bad happens during the next few weeks before everyone is back on board and there’s a security breach over the meanwhile.