Rollbacks, Emergency Freezes, and the End of Trust Minimization

If a smart contract does exactly what the code says and someone loses $50M, is that theft, user error, or developer error?