As Harry Tuttle said, "We're all in it together."
https://www.youtube.com/watch?v=xlCPkmb6cuYWhich is why it pisses me off when a company deploys insecure software or hardware, claiming that network security is the customer's responsibility.
So my home network should be reasonably secure, so that it doesn't become part of a bot net. Which means that I have to, or should, become at least knowledgeable enough to know what to buy, what to do, and what not to do. Which means that my router vendor better step up and sell me something secure.
Is it the responsibility of end users to submit bug tickets? I think it is.
Is it the responsibility of end users, or the vendors receiving reports, to publish discoveries of exploits in the wild? I think it is.
Is it the responsibility of a pedestrian who notices a skateboard on the sidewalk to move it aside and upside down so no one does a splat fall? I think it is.
We're all in it together.