Google I'll grant, but Amazon's site is actually insecure, not only do they lack EV but they lack even "basic" SSL/HTTPS across the board. They deliver cookies

Google I'll grant, but Amazon's site is actually insecure, not only do they lack EV but they lack even "basic" SSL/HTTPS across the board. They deliver cookies via HTTP (without even flagging them HTTP only) and an attack can intercept/modify the HTTP page in order to redirect a user who hits the "login" button to a server controlled by the attacker (essentially turning the real Amazon.com page into a giant philishing attack on an insecure network). Amazon should be ashamed of themselves in 2015. No assets let alone their home page should be non-HTTPS.