Ultimately, all security is founded on a basis of trust. Be it trust that their word is good, their signature is difficult to forge, their code they open-source is actually what is running, etc. We trust these companies to do right by us as their customers.