[qF]

Neither, making a 100% sure that every security hole is plugged takes time, and as such money. Corporations simply do not want to pay extra for this (in most cases).

The Anonymous guys on the other hand do it in their free time and as such have a far greater amount of time available to find bugs than the developers had to find&fix them.

On top of that most "hacks" by Anonymous are done using automated tools that find and exploit SQL Injection vulnerabilities. Combine that with that Anon doesn't publicize about the times they don't get in, it's easy to make it look like you know what you're doing. But if they find a SQLi vulnerability in 1 in every 10.000 websites they 'test' it's suddenly not that impressive any more.

[b2spirit]

Thanks. That is a good answer.