They have to a lot to prove; Dropbox's patchy security record is now coupled with Mailbox's completely unproven security.