The list is a complete joke. Clearly the criteria was designed to favor Kraken that got an A score. Bitstamp got a C+ score and is place no. 105 

I'm comparing these two because they are the ones I use most.

Kraken has DoS protection? Really!? They are unable to handle even legitimate traffic during a rally. A DoS kills them instantly.

Kraken gets 4/4 for user account security? 2FA is optional. No pasword expiration policy. Oh, please...