Credit scores may predict risk, but their use is controversial