The bigger risk is underinvestment, claims consulting biz McKinsey