It doesn't absolve you from responsibility for the harms done as a result of an action and for the financial liabilities that follow from that. But if we as engineers are evaluating the competence of an organization, it does mean that "Marriott was incompetent at security" is false.