Dropbox has the exact same policies and procedures, they just don't have the same technical abilities that Google has. Quoting from their AUP:
"...you must not even try to do any of the following ...:
...
- publish, share, or store materials that constitute child sexually exploitative material (including material which may not be illegal child sexual abuse material but which nonetheless sexually exploits or promotes the sexual exploitation of minors), unlawful pornography, or are otherwise indecent;
- publish, share, or store content that contains or promotes extreme acts of violence or terrorist activity, including terror propaganda;
- advocate bigotry or hatred against any person or group of people based on their race, religion, ethnicity, sex, gender identity, sexual orientation, disability, or impairment;
...
We reserve the right to take appropriate action in response to violations of this policy, which could include removing or disabling access to content, suspending a user’s access to the Services, or terminating an account."
Quoting from their privacy FAQ:
"Examples of Dropbox processing your data in furtherance of its legitimate interests in operating our Services and business include:
...
- Investigating and preventing security issues and abuse of the Dropbox Services or Dropbox users."
It's not the rules, those are common, it's the lack of human after. When the automation goes wrong, how much effort is it to get a human and to fix the issue. Or how many other services are taken down too. Google as an identity provider means that other third parties/devices are down in the mean time.
The point is really, that these companies are so large that they should be much more regulated and treated like any utility. That means it is a legal proceeding when they want to drop customers. This many mean that people, gulp, pay for services, but they have chosen to intertwine themselves into too many places in the consumer landscape.
I wonder how much it used to suck when the power company wasn’t as regulated and would do stuff like “we detected illegal activity so we shut off your power.”
I’d like some balance because I don’t want Google and Dropbox to suck as much as my power and phone company. But do want some regulation around lack of due process and “bundling” where a YouTube comment can result in my GCP account shut down.
"...you must not even try to do any of the following ...: ...
- publish, share, or store materials that constitute child sexually exploitative material (including material which may not be illegal child sexual abuse material but which nonetheless sexually exploits or promotes the sexual exploitation of minors), unlawful pornography, or are otherwise indecent;
- publish, share, or store content that contains or promotes extreme acts of violence or terrorist activity, including terror propaganda;
- advocate bigotry or hatred against any person or group of people based on their race, religion, ethnicity, sex, gender identity, sexual orientation, disability, or impairment;
...
We reserve the right to take appropriate action in response to violations of this policy, which could include removing or disabling access to content, suspending a user’s access to the Services, or terminating an account."
Quoting from their privacy FAQ:
"Examples of Dropbox processing your data in furtherance of its legitimate interests in operating our Services and business include:
...
- Investigating and preventing security issues and abuse of the Dropbox Services or Dropbox users."