It is hard to find obvious real world comparison for this kind of thing.  Perhaps it should be thought of like food hygiene.<p>If you sell dangerous food you should take responsibility for that and not just blame the bacteria.  But if someone intentionally infects food they should also take responsibility.  Those two perspectives are not incompatible.<p>But the lesson is that bacteria and hackers will always exist!