You can't expect that malicious actor would be fighting against malicious actors that are increase shareholder value. Tbh at this point it's governments fault. You can't expect British American Tobacco to fight against smoking. It's not really their job. Their job is increasing said shareholder value.
I think it's fair to hold the government to account, but it's good to be cognizant of how entrenched corporatism is in our modern governance.
If your "just increasing shareholder value" is found to cause damages to the public, you should be held to account for that.
Tobacco companies are responsible for not promoting to minors.
But if we take a more relevant comparison: In the financial sector, banks are responsible for detecting abuse.
They’re not the only ones responsible, but they don’t get to absolve all responsibility because someone else committed a crime using the banks infrastructure.
You can't expect me to stop selling crack to kids on the streets. My job is to feed my family.