There is risk no matter what you do. If you do offer non-QMs, you have litigation risk; difficult to quantify, but it's there. You also might receive criticism from your regulator on a safety and soundness basis for such loans.
So we're still caught in the constant conundrum: fall more on the CRA compliance side, or more on the safety and soundness side? Either way, we'll likely be criticized.
_________________________
Management is doing things right; leadership is doing the right things. Peter Drucker