If they file suit against someone, it would have to be against another vendor. Companies are running the vendors software. Phonefactor was a vendor; Microsoft bought that vendor thus became liable.
If for example Google or some other corporation is running EMC authentication software, they would have to sue EMC.