I agree. This would be market-y even if the actual resource wasn't hidden behind a signup page; most security firms have guidance for lambda security, which makes it odd to see a random firm declare the "top 10".