We have a lot of compliance requirements that I'd rather not get into. In general, the FedRAMP Moderate baseline is where we start, and depending on what/who the data/users are we may add more requirements.
OneDrive claims to do this at the service level, but the implementation is poor and the controls aren't very robust when you implement. (Unless you buy Azure AD and double the cost or wait for their rewritten sync engine) Google & Box (although Box wants a high premium $$) are a lot better, but Dropbox is still best in class for sync.
In some cases, we are forced to throw features away. For example, we have some users where a solution that encrypts data, limiting editing & search capability is a requirement for some information.
Beyond that, a broader concern that would be of interest to me would be narrowing the scope of some of Dropbox's features like dedupe and "forever" files. (It's been awhile since I looked, so this may have changed) I would prefer a solution where there was a key isolating our data from other data in the Dropbox cloud. (bonus points if we controlled that key) That way, nobody outside of our enterprise would have a way to know if a specific piece of information was already uploaded to Dropbox.
To me, it's great tool for a single person or a team of 8-25 people. It's missing stuff and is expensive for a real big org, and doesn't scale low enough for a family. (at least at a price that I'm willing to pay)