Depends entirely on the source:
Best practice: Buy UMDs used + rip your own ISOs for CFW convenience. Supports preservation, stays legal.