Problem is not that Zapier or any other system want access to your whole Dropbox. Problem is that Dropbox API is constructed in such a way that no granular access is possible to request from a user. Google Drive in comparison is more fine-graned however more complicated to use (from API side) too.