How (in)effective is US banking supervision?