The leaker is responsible, not Trump.
Just for the technicality: No. Trump uttered the words.
You might argue that the leaker is responsible for the amount of people that heard those words and the ensuing racking up of damages.
This is one of the reasons Ruby’s name was bleeped out by WAPO.