if grok never existed and X instead ran a black-box-implementation "press button receive CP" webapp, X would be legally culpable and liable each time a user pressed the button, for production plus distribution
the same is true if the webapp has a blank "type what you want I'll make it for you" field and the user types "CP" and the webapp makes it.