Correct, anyone can have ripped a ROM and shared it. Doing extra validation work would be expensive and probably someone would crack it. There was about 4 people selling flashed cards. Three of them got into fights. It was a bad look for us and am glad now Apple has moved the boot screen to the motherboard. Any GPU should work in the Mac Pro 7,1 is macOS drivers are present. Let's see.
Couple of things:
1) The 680 ROM and all subsequent custom ROMs (for Maxwell and Pascal) need a larger ROM chip than the one that comes on the PC versions of all NVIDIA cards, at least up until Turing. Flashing a PC card with a Mac-compatible ROM means installing a new larger ROM chip, which always seemed like the biggest benefit of having someone like MVC do it for you as this is likely beyond the abilities of most users.
2) While the 680 ROM was the starting point for all the custom Kepler ROMs, netkas and MVC had to reverse engineer the Maxwell and Pascal ROMs and write their own UEFI ROM for those cards. I kind of understand why they'd be upset if people then ripped their ROM off their boards and then started giving it away for free, or reselling it as their own work (both of which have happened in the past, as I understand it).
To be crystal clear, please do not read this as a defense of MVC, I'm simply attempting to point out that the Mac ROM situation is a lot more complex than just "rip the 680 Mac Edition ROM and all future NVIDIA cards will just work".