Not for nothing, I would say larger companies will often have more issues with security due to larger teams.Both. When you a have a corporation with a team of paid professionals is different from 3 guys trying their best. something might slip by. Its not a rule, but a general guide line.
Do you feel the same way for small FOSS projects? Do you actively suggest people to avoid those and use commercial products in its place that were produced by large companies like MS, Google, etc?