In a sharded cluster the setFeatureCompatibilityVersion command should be run only on a mongos it might be a good idea to reject this command if it is run on a mongod started with either the configsvr or shardsvr options.