Note that the email mentions that some users (well, at least the user who disclosed the email) did not have any of their files accessed: "our records do not ind

Note that the email mentions that some users (well, at least the user who disclosed the email) did not have any of their files accessed: "our records do not indicate that any files were viewed or downloaded." Presumably, they're doing something different for users who did have their files accessed, or at least if one of those users specifically requested that information they would disclose it. If you're saying that Dropbox should include an access log for their web interface, then I fully agree (even if it's buried in the interface, with a giant "experimental" warning, it would still be useful).