Why ESG scores are better for business than risk management