The solution is to accept that shitty candidates can't always be filtered out and to have a probation period to remove them before they do too much damage to your codebase/morale.