To those saying "it was the dealers, not Audi" I would say that becoming a dealer (in the UK at least) for a brand like Audi is not a simple matter of just applying to stick the Audi/VW badge up over the door.
Audi have a responsibility to vet their official dealers. It's the expectation here.
So it was the dealers directly, but since they are acting as Audi's representatives, I'd consider Audi to be culpable also.
Of course, StringUtils is not in the core API; the first idiom "foo".equals(bar) works in Java everywhere, StringUtils.equals("foo", bar) will only work in projects that pull in org.apache.commons.
Personally I prefer using facilities in the core API over third party APIs, even if the third party API is included anyway for some essential function.
Edit: rephrased to be more passive