The device itself obviously can't be blamed. The manufacturer, the owner, the seller, and the regulators who allowed it to be sold arguably do bear some responsibility, though. In something like this, there's rarely one party who's solely responsible.
(Similarly, the LLM itself obviously cannot bear any responsibility, but the vendor might.)