The prevailing idea amongst the internet is that the ROMs are legal to have if you own the game. If this is not entirely the case, one could plead ignorance and arguably succeed.
Also, if he owns the original games, why buy the VC? Maybe because his NES stopped working like TEN FUCKING YEARS AGO FUCK. I know MINE did.