Are we evaluating AI and machine learning for cybersecurity objectively?