What responsibility should United and American take for the events of 9/11?

I understand that airport security people take their orders from the airlines. Can these airlines be held liable for breaches?

If they are not, how can we understand the extraordinary security taken by carriers such as El-Al?

How culpable is the FAA for ineffective security at airports?