Exactly, that's the only rational way to look at it. The person submitting the code is responsible for it. Period. How they went about producing it is their own business, but they are the one who takes ownership of the result.