Same instinct: the human is in the loop. The program runs on their machine; they own the deployment and the guardrails. Legal questions will follow the tech, but responsibility starts with who hit deploy.

if my toaster engaged in some seriously undefined behavior that I couldn't have predicted, and hurts someone, I don't think I'd be responsible. seems like we'll find out rather soon lol

And when it spins up its own accounts, pays for, and builds vps that are encrypted without your knowledge?