If Coldcard acknowledged the seed generation flaw, shouldn’t they reimburse users who lost BTC?

I’ve been reading about the recent issue where researchers found that the seed generation on certain Coldcard Mk3devices wasn’t as random as it should have been, making it possible under certain conditions to derive affected wallets.

This got me thinking about the company’s responsibility.

If the manufacturer found the flaw, acknowledged it, and users ended up losing Bitcoin because of that vulnerability, shouldn’t the company be responsible for reimbursing those users?

I know hardware wallet companies usually have disclaimers that they’re not liable for losses, but if the loss was caused by a defect in their own product rather than user error, does that change anything from a legal or ethical standpoint?

I’m curious if there are any legal experts or people familiar with product liability who can weigh in. Has anything like this happened before with another hardware wallet company?