Eg if you had a known dangerous dog that had bitten twelve babies before but you didn’t destroy it, you’re up the creek even if it got out because of the meteor.
But if the dog only but because it’s tail got singed by the meteor, you’d probably be ok.
In the same way you may generally be responsible if you rear end someone, but if it was caused by someone rear ending you then that’s not your fault. That may seem obvious, but if someone stoped several car lengths back to lower the risk of someone getting hit if you’re rear ended. Thus the standard is reasonable precautions rather than requiring people to do absolutely anything possible.
Doesn't matter what precautions the person took, if the dog gets out and bites another person, they're liable in most states.
But that 36 state list includes many exceptions. Provocation is an exception in the majority of those 36 states, and trespassing is almost universally an exception. Nebraska excludes harm cases when the dog is being playful etc.
I suspect the same would be considered for computer security. Hacker News and a Bank have very different bars for what’s reasonable.