Depending on which BOINC projects you choose to run, BOINC may or may not need continual access to the Internet. Most of the projects I run only need intermittent access to upload and receive new workunits, but CERN projects need continuous access while running. Also, BOINC will run if the certificates are not owned by BOINC, but will complain in the logs when they are updated, and then you could update them by hand.
So far as I know, there have not been any vectors propagated via BOINC. -- G.Wolfe Woodbury redwo...@gmail.com