I don't think the user of the PC should take responsibility.When his or her PC was invading by a hacker,they even didn't know what was happening and they have few approaches to protect their PC.After all,the best firewall shall has its bug.So the owners are also the victim.Of course,the owner should learn from it and do more to prevent their PC from being invaded again.