I know it's not an AMA but who is the worst, Google or Microsoft?

Using Linux, why do you have more confidence that there is no malicious code hidden away by the smaller outfits?

Thank-you