From my perspective, the developer of the operating system should be held responsible when a malicious programmer gains the sensitive data and spread it. Today all most every of us uses operating systems to do quantities of things. We are pleased to use because it is not only convenient but also safe in our minds. If an operating system’s security has a flaw, the developer should deal with it immediately and undertake responsibility. Otherwise people will look down upon it.