Not actually legal, but commonly ignored by the authorities, especially if those hackers also are willing to play on the national team (aka hack for the Russian authorities). It's the reasons that some malware (example) has functions that automatically shut it down if it detects use of Russian language on a target, e.g. a computer where the word processing application is installed with a Russian language package or a virtual keyboard in Russian. By setting those limits, they reduce the risk of incidentally hitting a Russian target and pissing off the Russian authorities.