It's publicly available code that comes with licenses on how you can use that code that they ignore, such as share alike but they're charging. That's an ethical issue.

In the early days (months after public release not beta), it would literally give you code stolen from someone's repo, sometimes with credentials (security risk) and project specific stuff. That means because you took code verbatim to the naked eye you would be held liable for license violation.