MI5 failed to carry out checks on the ringleader of the July 7 London bombers, yet it "cannot be criticised", a report has said.