They have a formula for it and don't care one bit about it. Often times theres no SSL and many other security options are ignored.

I was shocked how much of law was simple find/replace on templates.