Complex op risk models open to high error, study finds