It's not "open enough" to do an honest evaluation of these systems by constructing adversarial benchmarks.