Or from a slightly different perspective, "strongly encouraging the developers at Dropbox to focus _now_ on security/privacy issues that ought to have been dealt with before pushing their existing code live". Doesn't seem to deserve the label "worst crime" when described like that.