The article Lammy linked is indeed the correct one. When that bit of news came out I checked my account, and it turned out that Dropbox had added and enabled the toggle without my consent. I was a paying customer mind you, I paid like $120/yr for my storage. After they pulled that crap I started working on setting up Nextcloud hosted in a VPS. It's more expensive, but Dropbox permanently burned my trust when they did what they did.