Thought it was strange when i decided to do the day 1 password like last year but wasn't going to complain, it doesn't really seem to harm anything.
Less so about the builds themselves and just more concerned about just how secure Dropbox is across all the other files in there when the folder that that build is in is listed as private :'D
