“None of the 10 biggest U.S. banks have put policies in place to delay annual bonuses for a broad group of critical employees whose risk-taking could endanger the bank.”