data's stored on s3, and encrypted before storage -- there'll be another option to enter in an additional passphrase (or private key) when installing in order to encrypt your data before it leaves your computer (kind of like what mozy does.)
Maybe, but the encryption is entirely in the hands of the client application that dropbox provides (I suppose it is not open source), so it is still a matter of faith.
