Also Cloanto say they own the ROMs, but they can't prove this.

I think Gateway, and then Acer owns it, but who knows.

I used https://aminet.net/package/util/misc/GrabKickDisk to grab ROMs from my Amigas. But you can just as well grab them from random internet site, check the checksum and be happy and guilt free about it.