For me, it's the combination of the two events that is disturbing. Dropbox was discovered to be vulnerable to an exploit that may have been planted to facilitate government surveillance, and around the same time, Dropbox brings on board one of the architects of the current government surveillance overreach.