Everyone is responsible by their actions. It doesnt matter if I hit you with a fist or a car, I still caused you harm, not the car manufacturer.
So if someones vibe coded app does harm they are responsible for it, not whoever trained the model or provided the compute. If they hide behind the vibeco...