Why isn't Epic at fault for dishing out insecurity on a platform that contain's a user's everything? If instead it Google wasn't in the picture at all, but an unknown hacker who disclosed vulnerability, would it still make sense to divert blame from Epic? I personally would still blame Epic.

Similarly, I also wouldn't care if a random hacker or reputable firm disclosed Target's vulnerabilities when they put millions of customers at risk. I'd blame Target by a big margin.