If a car has parts that are easily hacked/broken into, leading to injury to its user while the user "chose" to drive, shouldn't the manufacturer be at fault? This is what happened with CA and Facebook's API.

I'm not saying CA shouldn't be held accountable, I'm saying Facebook also has part of the blame.