Who's to Blame for AI-Generated Harm--Users or Companies?