I thought we were talking about how to use necessary requirements without risking a suit, not how to conceal racial preferences by using cleverly chosen proxy requirements.

I wasn't. I was talking about how the obvious loopholes are already closed or have been heavily restricted (even at the cost of false positives), and hence how Quirrel's comments are naive and uninformed.

But it looks like you can't use job application degree requirements without showing a business need either.

Yes, that doesn't surprise me in the least.