Yes. Courts will generally assign blame to whoever did the thing that caused a breach of the law, which in this case is the user.

In other words, law isn’t a programming language.