My idea, as I've repeated multiple times, is to blame everyone, and yes, I think they should all be criminally liable. You're the one who seems to think only business people can do wrong, and are perfectly willing to go to bat for the people who actually design and build these systems.

We're not limited to a bounded amount of blame to divvy out. We can blame the mob boss and the hitmen.