Yes, that would a huge pain to require all Dropbox users to force-update to get new root certs. It will probably take a while until they are due to expire.