stuff certainly does happen, though maybe not as frequently to some companies as it does to others.

But when it does happen, you own the issue yourself, as ultimately you chose to outsource your technology stack (or whatever the service in question is). You certainly don’t hold your suppliers up as a shield and hide behind them in a pitiful attempt to avoid paying compensation. It’s almost unprecedented to name a supplier.