> assuming the risk of it all

scapegoating isn't really legally viable. corps who outsource their development haven't outsourced their liability.