The problem with checking version.bind is that SOP for configuring BIND securely has been to disable or spoof it for some time now.
Yes, that is a problem. 'Hardened' configurations cannot be checked. But there are a lot of non-hardened configuration. Actually there are more that returns there version than not.