'The quantified customer', or how financial institutions value risk