I think Apple benefits from safe harbor law - but I can't cite the statue. In this case I think the legal liability is against the bad actor. Not the corporation that let this bug out into the wild.

I imagine at some point the government will regulate software and the liability may shift. It could be good, but it could also be bad.