I know DropBox has had security fallacies in the past.

Inside Firewall or not Inside Firewall, how is the security designed here?