Afaik they weren't even applying BSL4 security to their coronavirus research. On top of that, before the outbreak, the Pasteur institute, who was incidentally supposed to be a research partner but was kept at arms' length, raised an alarm on their apparent general lack of safety compliance.

That and the fact that the Chinese dicatorship blocking any inquiry into the matter are enough to put the blame on that lab until proven otherwise.