> If the exploit wasn't put there intentionally, then we're talking about a bug in the software. Do you really want liability for software bugs?

For some bugs, that count as negligence. Sw engineering as a field knows how to make much safer products than what is in these wormable boxes.