That seems right. Businesses aren't islands, they work with other businesses to provide their services. But you as a business have an issue with a vendor/supplier, that's still on you. If McDonalds can't get fries, I don't blame farmer X for a failed harvest, I blame McDonalds for a fragile supply chain.
We should figure out who McDonalds' ice cream machine maker is and ask them why their product keeps breaking down.
This might be an interesting read: https://www.wired.com/story/they-hacked-mcdonalds-ice-cream-...
Doesn't that imply that if there's a security breach at Stripe, that your users will blame you [too]