I've also seen the movie and didn't take away the message that "CDOs are evil", but rather that the risk was not accurately reflected in the ratings.

The reasons for that are debatable of course, ranging from bankers greed to rating agencies misbehavior and so on.