They shouldn't be off the hook completely. They should still have to show they have conducted a responsible level of testing and checking for the circumstances, that they are continuing to refine that verification even after widespread deployment, and to motivate that to be done all levels requires some degree of moral hazard remains in place for them. In other words there should be some sharing of risk. Imho.
So this isn't like we are relying on AZ to create it, test it and sign it off. National agencies will ultimately sign off on whether it can be used or not. Given the high profile nature of this vaccine you can be sure that results will be widely studied, and the opportunity to hide results they don't like will be limited given we all know the trials are occurring.
If there is some sharing of risk, but no profit to be had (and ultimately profit is what buffers you against risk) then why would you be involved at all? Let some other company take the risk?