Towards a rigorous evaluation of RAG systems: the challenge of due diligence