Is it? I hypothesize that smaller exchange have less resources to develop secure systems. While they maybe smaller targets, I think their architecture maybe less robust. Hence why I trust gmail to run my email rather than rolling my own server.
This is nice because it makes me want to make good decisions for the user experience (no multi-page image galleries) which I believe will help attract the types of visitors my advertisers want to interact with.