Banks can’t seem to kick the habit of underwriting risky loans