They’re OEM keys which are against EULA to use in this way. It might work now, but they could ban those keys later if they want to.

It's "legit" insofar as "it's gets you a string that you can enter into windows and will activate". I doubt it would satisfy any legal requirements, although to be fair a home user probably wouldn't be very concerned about that.