BMI is bullshit but mostly in the other direction - people who are overfat without being overweight by BMI. It's much less common to be overweight without being overfat.
What is also true, though, is that the risk curve for underweight is sharp but for overweight is pretty flat - a few pounds over just doesn't add much risk, while a few pounds under does add some risk.
