Mean Aggregator Is More Robust Than Robust Aggregators Under Label Poisoning Attacks