Maybe users should be responsible for what they intentionally run on their machines.
I’m not even saying responsible— just they cant reasonably complain when they drive somewhere new and they don’t like the road conditions.
Your original analogy is more like this: If a person's computer got hacked unintentionally, they shouldn’t be responsible for the damage it caused to others.
No, the onus is clearly on the developers, who are the ones with the professional responsibility to make software that abides by the laws.
I shouldn’t have to abide by some stupid rules to plug my server onto the Internet and listen on port 80.