It’ll be legal according to Pokémon Bank; whether the save is injected by Nintendo Staff or by some kid is irrelevant to it. There would be nothing to tell them apart.
It’ll matter when someone asks you about it, for example, if someone asks how you got it, and your reply was “eBay”. You will get lots of doubtful looks.