Comment by stestagg

Just as if you were to buy a child’s toy that has a secret embedded camera that streams to some foreign server.

It may be the manufacturers fault, but the person who sold it to you (the provider) is liable.

Should be the same here