I code for a living - for two decades, now. And UNIX is in my blood.
I have therefore (naturally) installed Termux on my Android phone, and use it to spawn sshd - a very useful process when your ISP connection fails you, since you get to use the phone's internet connection (via ssh -D 1080 ... and configuring Firefox to use localhost:1080 as SOCKS proxy). This does not depend on your contract allowing hotspot-ing or not - it's close to bullet-proof.
Yesterday I ssh-ed in the phone, looking around and checking out the Android environment - and I see Termux's ps aux return among others .... /system/xbin/dropboxd.
What the heck - I never installed Dropbox on my phone!
It does not appear in the list of installed apps, either - and is naturally not removable, since I am not root.