This is a good precautionary act by the team at Dropbox and I am also pleased to see the push for two-factor authentication as a second layer of defense for Dropbox accounts.
http://www.infosecurity-magazine.com/news/dropbox-resetting-user-passwords/
Virtual Sweater Vest 