From a U.S. perspective, I question the categorical statement about 'legality.' See, e.g., Operation Varsity Blues.[1]. Maybe 'commonplace', but unless the folks involved have happily run it past their GCs and the local U.S. Attorney, don't get ahead of yourself there...

[1] https://en.m.wikipedia.org/wiki/2019_college_admissions_brib...