Software with vulnerabilities was defectively written.

If someone makes tanks with paper for armour, because it cuts costs, they are to blame if those tanks catch fire.