Why not just integrate Dropbox in the same way Facebook has set up OAuth to work? When an app program needs Facebook access instead of getting a Safari window it just switches to the Facebook application, access is granted, and returns the user to the originating application.
Could this not work exactly the same with Dropbox?