Hmm. Most of mine should turn up legit. (I know the two hacked ones I did identify myself I disposed of, so they aren't mixed in). I do know they also have the Ribbon restriction, meaning they can't verify it, and recommend battle videos (I just read the FAQ LMAO), but since certain Pokémon cannot be in such battles, it would make checking them impossible (besides, most of these have a ribbon when distributed). I mean, I can't see how I would check the Wishmaker Jirachi you sent me, as an example, since it has a Ribbon on it.
Even so, I don't think I'd have any legality issues. The only time that SHOULD happen is if I knowingly hack together a Pokémon (I still plan to re-create the Surfing Pikachu in Black, but it would trip the sensors if offered or used in a battle; geez, GF, offer another one since you forbade its' passage, will ya?).