I had worked with tech support to find a bug with how Compliance works.
I’m sure the programmers would not consider “Old version” as a non-compliance issue, only “Not installed”.
Might I suggest in the policy for a group, you allow us to define what a non-compliance issue is.
For example, I don’t really care if Facebook/Instagram is an old version, but if it is the app we need to keep current, I need to know.
If (mandatory app version) < (current app version) then set (non-compliant flag)=1