Why We Need Fair and Accurate Cybersecurity Ratings