Since the check list is mainly opinion based (I didn't see any stats or references) I would add that it in my opinion you should get an SSL certificate.

It was the first thing I noticed when I clicked on the link. Perhaps to many audiences this isn't important but I know for some it really does matter.