[MrQuincle]

You can remove the executable bit from the update process probably.

Disclaimer: I run Ubuntu.

[rainforest]

I could be mistaken but on install the Dropbox app adds a few SetUID binaries that probably allow them to put the bit back.