Right. The server is not liable. The people who set up the server to serve application data for every client to any client is.

Just like the IRS admin assistant in the example was, the agent to cause the transfer. The filing cabinet/server is not the agent, simply the repository responding to the system and practices in place.