As long as the source code is freely available, that's entirely congruent with GPL, which is one of the most stringent licenses. You can lay a lot of criticism on their business practices, and I would not deploy this on my home server, but it haven't seen any evidence that they're infringing any licenses.