“Credit ratings and risk weightings must undergo a thorough process of review and revision. No security or instrument on the planet should have a zero risk weighting.”