Fears EU’s ‘tough legacy’ fix could tie risk managers’ hands