I don't really see the problem with a flash image, as it can be generated with many tools.
About the other file, is it boot1.img or boot2.img ?
Boot2.img is embedded in OS update files and can be extracted with many archiving tools, so no problem either.
Boot1.img would be more problematic, as in can only be dumped from a real calculator.
But more than that, the moral problem for me
(whatever the licences are) is selling the files which were probably obtained/generated with free tools, and not sharing anything with the tools authors - supposing there are people ignorant enough to pay for this.
