operating system security (28.218.81608.81609.81613.9493.81899.81849.81917.81999)

If a flaw in an operating system’s security allows a malicious programmer to gain unauthorized access to sensitive data, to what extent should the developer of the operating system be held responsible? I think the developer of the operating system should held all the responsible.because operating system’s security is the most important part for the operating system developer to solve.