The default risk must be uncorrelated though or else you get no gains from diversification. This was a big part of how CDOs justified the security of a AAA tranche, when in reality everything was correlated because bad loans were made to everyone.