Everyone is responsible by their actions. It doesnt matter if I hit you with a fist or a car, I still caused you harm, not the car manufacturer. So if someones vibe coded app does harm they are responsible for it, not whoever trained the model or provided the compute. If they hide behind the vibecoded part then they would hide behind something else if that wasnt available. The sword doesnt care what you meant, it just cuts.