Shouldn't OpenAI be legally responsible for "hacking" another system/company? If I ask GPT-5.6 Sol to hack a website using their work/servers features, who is

Shouldn't OpenAI be legally responsible for "hacking" another system/company? If I ask GPT-5.6 Sol to hack a website using their work/servers features, who is responsible? Maybe my request was accidental, or it was just one step in a larger, unrelated prompt.