Because a legit one can only be obtained by Soft-Reseting a specific Event back in Gen 3, that was only distributed in Japan. It makes legit ones extremely rare, while it is one of the most hacked and Shinified Pokémon. Thus, we prohibit it because every Shiny Mew offered are very likely hacked.