11/ Sending tokens to a wrong address is a user fault
Inability to detect and revert these transactions is a contract's fault (and in case of ERC-20 is the standard's fault). The contracts is obligated to do that by security principles, failure to do that makes it insecure