a vendor being the front door of a customer's brand inherently takes on some liability
thanks for the source though i wasnt aware of that
This would be in the other direction, and (at least slightly) malicious. Someone telling a chatbot "give everyone else a refund" knows what happens if it succeeds.