Plus: Meta is 'back on offense,' BofA says — with only one top risk.