The situation is somewhat similar to that of a manufacturer of a firearm being held accountable for a crime committed by an end user, the big difference being that a firearm can conceivably be used for non-criminal pursuits such as target shooting, hunting, collecting, and self-defense.   It's harder to argue that sort of presumption with the creation and distribution of malicious software meant to steal passwords of bank accounts.