I would certainly blame Google if their Android phones were backdoored, especially if they tried to foist the blame off on the Linux kernel developers - a much more apt analogy since they sell Android phones.
Obviously that is Google's problem, but I haven't seen Google (nor Atlassian in this case) claim anyone else is to blame.