Haven't risk based models been a thing for the last 15-20 years ?