Hacker News Reader

You can remove the executable bit from the update process probably.

Disclaimer: I run Ubuntu.

I could be mistaken but on install the Dropbox app adds a few SetUID binaries that probably allow them to put the bit back.