Forgive me for being thick-headed, but you have a password to access dropbox, right? Presumably one that, since you have to remember it, someone might brute-fo

Forgive me for being thick-headed, but you have a password to access dropbox, right? Presumably one that, since you have to remember it, someone might brute-force, just like any other password you have to remember. If they get your data file, then they can just offline brute-force that, and again, since it is protected by a password that you have to remember, this should not be too hard, right? So we have 2 memorable-length passwords, one of which the enemy can brute-force offline. So we really only have the protection of 1 memorable-length password, the one to get into the account itself, which is slightly harder to brute-force. So how is this any more secure than just memorizing one strong password and using it for everything that is important? Any service that isn't trustworthy enough to get that password is also not trustworthy enough to get your personal data in the first place...