Are Lawyers the Best Judge of Cybersecurity?