Dropbox didn't require a login password for a while a couple weeks ago. Anyone storing a wallet file on dropbox should've promptly transferred the bitcoins to a new wallet file.
Are you serious? They don't run automated tests on something critical like authentication? That's retarded.