Dropbox has the same issue with their two setuid files and DropboxInstaller helper files that are unsigned, I was wondering if I should file it with the security folks as well