Fundamentally, risk isn't binary. There's more risk and there's less risk. For my kind of team, the absence of side projects, demonstrated lack of interest in furthering one's craft outside of paid hours increases the risk of this person not being able to pull his weight, if somehow he slips through the regular filtering mechanisms. As you pointed out, every candidate presents a unique risk profile, and every company weighs different factors differently.