It's not a loss leader. Yes, they pay the bureaus for access, but you're giving them rich data about you (I'd argue credit data is even richer than what FB has on you) to use to target financial products to you.