Here's a snippet from the article: "The short answer is that no one submitted it, but of course there's more to it than that. This year we reached out to the SpamAssassin community and asked them to participate. Although a few well-meaning souls volunteered to be the contacts for SpamAssassin, when it came time to test no one would step up to the plate and represent the product at a level that would make it competitive to the other enterprise-focused vendors."
They do talk favorably of spamassassin in a few parts, but overall they seemed to have missed the boat.
seems to me like their audience is the point n drool type of network admin. if it doesn't have a setup.exe they classify it as hard to maintain.
yes, you have to read a manpage to set up spamassassin. yes there are many different configs based on the various types of MTAs you can use, and whether you want side-wide or per-user configs. you may have to adjust scoring values to get a truly effective config. it took me maybe an hour to get my head around how to set up a per-user config with postfix and spamd. considering the amount of time it's saved me and my friends dealing with spam, i'd say it was an excellent time investment.