How about the individual who assumed the risk of visiting a strobing web page?

those who made the web stadards capable of doing _anything_ with the user's computing environment, let it be any useless/arbitrary, and those who forced this arbitrary code execution platform to be the same as the information browsing / catalogue system / document viewer platform what the web originally meant to be.

today users can not manage their bank account, enlist to classes, read newspapers online without the real fear of mining bitcoin for someone involuntarely, DDoS-ing goverment sites by hidden pixels, presenting unsolicited unrelated content to his audience on a presentation, and now, having sight damage...

The webbrowser that render it.