Why hold McKinsey liable for what Purdue Pharma actually did?

Bad advice could have been thrown out by management, but instead, was accepted, and executed on.

Shouldn't the blame rest on Purdue directors and the board?