Effectively this is done as a POC, don't expect any security on a machine running Windows 2000 nowadays.

Regarding legality, I hope that Microsoft doesn't claim any rights, since the Windows 2000 image has been published in WinWorld for years without issues.