Should have known better than to download and use his package, for its intended use, off of the Node package manager? If someone breaks into your house, do you

Should have known better than to download and use his package, for its intended use, off of the Node package manager? If someone breaks into your house, do you also claim that they should have known better than to use off-the-shelf locks? Come on man.