So who is at fault in your solution, the org who created and shipped the software bug, or the company that discovered it? I don't see how OpenAI is Ford in you

So who is at fault in your solution, the org who created and shipped the software bug, or the company that discovered it? I don't see how OpenAI is Ford in your analogy as OpenAI didn't make the software that blew up.