Manufacturers of ITAR controlled devices typically have to enforce compliance by their customers. If there's a method to enforce compliance and it isn't present, the manufacturer can be held responsible for the export. Some things (such as mirrors for lasers) can't really be enforced while others (large machines, aircraft) can be.