Can't we all agree, at least, that step one should be to clearly admit that they lied? Maybe they don't need to do anything else. Dropbox is a fine service as

Can't we all agree, at least, that step one should be to clearly admit that they lied? Maybe they don't need to do anything else. Dropbox is a fine service as it stands; security must be traded off against convenience, and the trade-off that Dropbox makes is acceptable to lots of people. They do have a responsibility to make sure that those people understand the trade-off, though, as well as a responsibility to admit that they've swept important details under the carpet in the past.