Early Cyanogen releases were fast and loose with redistribution of Google proprietary apps, which got the author in a spot of trouble IIRC. Right now the distribution of these ROMS is IMO pretty suspect - they include whole swathes of binary blobs that they really shouldn't be redistributing willy nilly. If you want the proprietary pieces that belong to the manufacturer of your phone, you should have to pull them off yourself. The ROM creators shouldn't be pulling these bits off of their phones and re-distributing them.
The fact that so many prebaked ROMs are distributed though megaupload-alikes is a bit of a giveaway as to the general philosophy of that community.