If it's a single account shared among everyone it's not so bad, security is ok if people use the "friends" options in it rather than public links. Also with the luxury of an expensive firewall I can control which bits they can use. I.e web based http upload only not the local app and sync feature.
If you were really that bothered you could set up a sync folder that had auditing on it to recored exactly what was uploaded and shared to private and public folders. You can also (with my firewall anyway) limit it to uploading .zip files with passwords on as well.
For a techie Secure FTP is better, but for end users it's not practical because they don't understand it fully. The remote site needs to have it permitted through their firewall which most dont, you still have to create and send FTP usernames and passwords to the remote users which is something IT would end up doing. If you let users do it, you're in the same boat not known who they've shared the username and password with or they won't get their heads around doing it at all...
You could use a private CMS portal which remote parties had to register an account on before being able to download stuff, but that's significant time effort and money invested, so unless it's a mission critical daily task it's not usually worth it.
Even with full logging it's still very hard to see what was sent. I mean what really was in the WorkDocuments.zip and who has got the time to audit the logs.
We have a transfer site which accepts both http and SFTP. Users don't need to know how SFTP works because they can simply upload it to the web portal whereby the documents automatically get zipped and fully audited (i.e. where the file came from)
I wouldn't ever use something like Dropbox for a corporate solution. Even a free SFTP server which has to be managed by IT is better (i.e. user raises a call to put a file on the SFTP server, create account for Joe Bloggs at Blah.org, etc.). Yes it's more work for IT (probably amounts to a hour a month) but it's much more secure and you shouldn't then have to worry about data loss - which is much harder to explain than the few second inconvenience to IT.
M.