If you pay a researcher to do gain of function research on dangerous viruses, and that research end up causing a global pandemic, you are absolutely to blame.
that is not correct in the slightest. It would only be your blame if you built and managed the lab. The lab is not US owned or managed, it's up to the lab who claims they can safely work on dangerous viruses to ensure that they keep it contained. They still own and manage and are responsible for the lab, the US just paid them for research. It's no different than the US contracting space onboard SpaceX rockets, the US isn't then suddenly responsible if the rocket misdirects and hits someone's house.
This has gotta be a troll man. They aren't responsible for poor security measures. They are only responsible for what is outlined in the thing they pay for. I'm gonna mute this thread purely because I'm pretty certain you're trolling for the sake of it. If for some reason you aren't trolling, take a business ethics and responsibilities course, there's some free ones online, or you could talk to a lawyer you might know, either one should help you understand.