The point of herd immunity is to protect people that can't be vaccinated. Even if you would force people to be immunized, it wouldn't be necessary to apply the same to computers. Vulnerable computers can't rely on herd immunity, and you'll have botnets whether or not updates are mandatory.