It may have been a time where they could say that but now that it is possible to buy bonds which is attached to a value in the game ; stealing an account results in stealing many bonds worth that were added into the account.
By allowing the thief to steal the account, they essentially became an associate to the thievery.
As for the other users : The thief had no other options. I had an account guardian (which somehow no longer exist at all?) and I would never login with my real passwords on external accounts. The only other way would be that RuneLite was hacked into somehow during the period of time I played. (And they would only steal my account years later? I was gone from the game for like 2 years)
Anyhow : Jagex can push down on players that it is our responsibility as much as they want ; At the end of the day, only a judge in a court of law may decide if that is true.
22-Dec-2022 17:08:38