Magic does not have a good understanding of connectivity when running DRC checks, which is why it is not easy to implement in magic. I assume that it would best be done as an antenna rule, by treating the mimcap layer like a device gate and specifying a small antenna ratio that would effectively force an error for anything that was connected downward from the capacitor bottom plate.