What if they hack your dropbox account and get a copy of the vault that way? They're not on your box, but now they can try to break into your vault.
If keeppass removes the possible timing attack, the attacker could just add it back in and use their own client, if they have a copy of your database.