For “dangerous” or weakly-guarded open source models, hold the hosts liable.

Of course the end user holds liability as well if they are jailbreaking models to do harmful things.