Exactly right. What do they know about it? They have an expensive firewall, and SSL on their website, they think they are covered.

Companies like this would be better off not on the internet at all. It's not like anyone needs to visit the website to know where the nearest Panera Bread is. Google will tell you, if you don't know.