It’s their fault. The people. The humans. The ones working there. The ones knowingly employing their knowledge in service of the company.
It’s always the humans.
Your opinion honestly does seem mostly aligned with mine (there's potentially blame for both the corporation and the individuals, with the corporation's portion of the blame being from influence on the individuals), and personally I find it kind of hard to determine how much the individual deserves since it depends a lot on circumstances we might never know (e.g. if the individual had a really sick family member, I genuinely might find it understandable that taking a job from Google that pays well even if it's doing some weird stuff with browsers; that's an extreme example, but my point is that I don't think whether it's blameworthy or not is a binary). I just don't read the comment I responded to as agreeing with any sort of nuance like that; my reading is that they're asserting that the individuals are fully and solely blameworthy and that the fact that they were operating under the behalf of a corporation is insignificant.