Machine learning-powered security systems should be used as a tool, not as a replacement for security teams for web apps.