When it's an open weight, locally run blackbox, you blame the user, since in that case it's very much possible for the user to restrict what the blackbox can actually do. They have full control over it, so it follows they have full responsibility.

None of that requires trying to impose limits on open models, unlike what Anthropic is aiming for.