> assuming the risk of it all

scapegoating isn't really legally viable. corps who outsource their development haven't outsourced their liability.

Sorry I meant ownership of it working when an alert goes off in production and having to fix it, not legal liability. I should have been more clear.