I think it doesn't matter if someone selling legal or illegal things is selling these bags. The last thing we want is a centralized compromisable node that has the address of every single vendor using MBBs. That goes against security in a very strong way, it creates a single point of failure and no matter if vendors get things shipped to fake ID boxes or not getting product is always the most risky part of this business. For customers it is less risky because they only need to worry about interception for the most part, for vendors there is a concentrated effort to fuck them and having all the vendors ordering bags from a source or even sources on SR is just absolutely horrible for security and I have no doubt whatsoever that it will lead to arrests sometime down the line, regardless of the legitimacy of the person currently selling them. Decentralization is one of our biggest security assets, don't throw it away by linking yourselves to a single point of failure.