Citizen Lab vs. NSO Group: A David and Goliath Battle for Transparency in the Spyware Industry