If there's a knowingly broken process, both sides of it are to blame. One party for using a broken process, the other for exploiting it.
Imagine you own a store with broken locks. A thief learns of that, and comes one night, and plunders your store. Yes, you'd be to blame for being irresponsible and stupid. But the thief would still be liable for theft.
Imagine you own a store with broken locks. A thief learns of that, and comes one night, and plunders your store. Yes, you'd be to blame for being irresponsible and stupid. But the thief would still be liable for theft.