If the user input can’t control the demon, then the person or company feeding the demon (ie paying the electric bill and collecting $$$ from users) is responsible. At the end of the day, dogs and cars are the same as data centers. If your dog bites by kid or your car rolls down the hill and hits my house, you are responsible for the damage. AI providers should be held to the same standard.
By the dog owner analogy, I think you meant AI users that effectuated this attack should be held responsible, not the dog's parents.
Well it seems we might not be too far from such a demon paying for itself. What then? Perhaps it's already here. I wouldn't know.