It depends on which responsibilities you can offload when facing your customers.

"You were hacked because the well known, respectable crypto lib I bundled with my binaries actually got a bug" is fine.

"You lost one day of productivity and I can't tell you when I'll be able to propose you a fix because I shipped you a lazy copy/paste" is not.