It is unfortunate, but I would place the blame not on the person who makes the technology, but the one who decides how to use it.
When we design something, we're "the one who decides how to use it"; that's part of designing it. The intentions of the designer matter, and if they're evil the designer should be blamed. Consider, If I make a torture device, can I just shrug my shoulders and say 'they decided to use it the way I designed it, so it's their fault'?
To make it more relatable, if I make a Friendface website where it's easy to share personal info but hard to protect it, should I deserve any of the blame? Even if the users deserve blame, that doesn't make the designer blameless. And the designers deserve more blame when you consider the complications of the real world, like marketing departments lying to the users about how it's safe, and managers denying any time for security issues (or denying the issues even exists).