Google and Intel;
Mishandled all this right from the start. Google will get away with it because they don't make CPUs.. Intel, not so much.
Some things should stay buried, at least until there are proper hardware fixes and Intel (or anybody else) shouldn't be selling CPUs still at this point that are still vulnerable, not least because there's nothing to sue for a replacement for, which I'm sure Intel knows. Long term it's going to hurt them though.