Just because a GSE uses a third-party vendor to assess the risk of seller/servicers as counter-parties that doesn’t mean the GSE – or their management – is off the hook if something goes awry.