Many to blame, including Microsoft.
Microsoft is the company that should be in the hot seat over this.
Microsoft is signing the drivers and pushing them out as an automatic update. Microsoft claims to test these driver (WHQL et al) and hold companies submitting them responsible for misdeeds.
When this happened before, Microsoft was quick to back out of the driver update. We didn't hear anything, but could at least believe that FTDI was "read the riot act" and told never to do this again. Or else.
Now that it has happened a second time, we'll see how serious Microsoft is about their reputation, and what the true standards are for hardware/driver certification.