t>he entity hosting the model should be held accountable

Not necessarily. If I buy a machine from a vendor, fail to test it to confirm that it’s safe to use in the way I intend to use it, and one of my employees gets maimed or killed by it, I’m liable, even though some liability might also be assignable to the manufacturer.