10 minutes is a rough guideline on how long it takes the network to confirm a payment, and verify that a transaction is not a double-spend or otherwise invalid. For large payments you'd want to wait longer because a theoretical attacker would have more incentive and resources to construct a double-spend.