Agreed.

Your users should not find out about these things via HN (or any other news site).

At this point, I don't think I can trust Dropbox with anything remotely valuable or private, and I bet I'm not the only person who feels this way.