They're not making money from the person who defaults (well, maybe if they default after a long series of payments). They're making money on average by lending to a lot of people, of which only a subset default. If you look like a bad risk, you pay more to subsidize all the people who also look like bad risks and will actually default.