Given their security record, Dropbox probably deserved (and still deserves, especially because of the unchangeable unique client ID issue) to be described in those terms.
I think I'd have a different opinion if they'd bothered to reply to any of my multiple emails to them at the time.