Mandatory versions in BOINC can only be set by the specific project like "To crunch for this project you need at least version X.Y"
Also a mandatory version does not automatically shutdown botnets, they just need to update.
And last point, BOINC tolerates 'botnets' like SharityEngine. They come in bundeled installers, so not totally malware and they add crunching power to projects.