Dropbox mentions that files get encrypted with AES, but I guess this only protects them from Amazon employees or from someone hacking Amazon, not from Dropbox employees (unless the AES password is generated from the user password and dropbox somehow doesn't have access to that (only a Hash? not sure how that could work).