If you use this as a (legal/registered) business, it will be that legal business entity that is responsible. If that business want's to blame the software, it can do so and go after the makers of the software, but that remains a matter between that business and its "supplier". It won't absolve the business for whatever damage it does downstream.
Running this as an individual, without the legal shielding a business typically gives you against being prosecuted on personal title, seriously risky. There will no doubt be "bros" that will do it anyway and flaunt all they've achieved with that. But they might be just one glitch away from going to jail (if not for running a business without a registration, which in many jurisdictions is illegal by itself).
In many countries directors can be held responsible a lot of things if they are negligent. For example, in UK law keeping trading after you should have known a company was unable to meet its liabilities can make directors responsible for its debts. A director might well be negligent if they failed to adequately check that an AI was not doing anything dangerous.
As far as I know (IANAL) it is in fact the only "person" you can charge. To the best of my knowledge, the whole point these "limited liability" legal constructions exist in the first place, is to protect individuals within a corporation for whatever they do as part of the business of a company (barring exceptions that have clearly not been part of that business and obvious individually committed crimes), typically "just following orders". If a company commits a crime, or in a worse case runs a criminal enterprise, it is the company that is legally responsible, not its employees. That is, in principle.
This can get more complicated higher up the management tree, where decisions can also be prosecuted on personal little, but that's usually a far more complicated matter. Also, if a whole group of employees willingly conspires to commit crimes, they might also be prosecuted individually for those crimes (there are limits to limited liabilities). However, that usually only works under special conditions and it would e.g. require that there's an obvious criminal enterprise aspect to it, rather than individual cases of illegal conduct.
That said, with the track record of some of these companies, actually designating some of the AI companies as a criminal enterprises may eventually happen (in due time) in some jurisdictions outside the USA. Certainly if it ever turns out that these companies have been storing and (ab)using everything they ever had access too, while blatantly lying about that just because some particular (post 9/11) US laws gives them that opportunity (and impunity) as long as the US government somehow requested them to do so (covertly; with gag order). Might legally work withing US jurisdiction, but would still be very much illegal everywhere else.
"Limited liability" refers to shareholders' financial liability being limited to their investment, and has nothing to do with civil or criminal liability of employees for their own actions, whether "following orders" or not.
You might want to look up LLC (Limited Liability Company), which goes by other names in different countries but still basically mean the same (though details may vary between different company types). While there certainly are exceptions, as mentioned before, in principle the employees of a company are not personally legally accountable for their actions as performed in the service of a company. The legal entity of that companies is. If you sincerely believe otherwise, you either live in a rather unusual country or maybe just need to educate yourself a bit better.
Where I'm from, LLC has nothing to do with criminal and everything to do with financial liability. They can cause millions in damages but only get sued for a couple thousands. But years in prison are still years in prison.
You are still personally legally liable if you break the law in a criminal matter. It is literally law 101 on when it is appororiate to lift the corporate viel. I'm very sure you are not a lawyer but you shouldn't go around calling people uneducated while saying illogical things like this.
Running this as an individual, without the legal shielding a business typically gives you against being prosecuted on personal title, seriously risky. There will no doubt be "bros" that will do it anyway and flaunt all they've achieved with that. But they might be just one glitch away from going to jail (if not for running a business without a registration, which in many jurisdictions is illegal by itself).