You can of course blame the victim while also blaming the perpetrator. As you point out, they're not mutually exclusive. But if your communication to your friend focused exclusively on her actions—like the comment does—then yes, I think that would be worthy of criticism.