At which point you're using technology even more complicate than dropbox and you have to trust that it works just as you have to trust that dropbox works. Not to mention that anything that can write to primary store (i.e. the "rewind for all actions" in your hypothetical solution) is just as likely to corrupt that store as dropbox is.