IA requires an account to download anything, so technically it's a flick of a switch away from just being used to track any downloads to the account, and figure out the person behind the account. It isn't not piracy, just because it's on the Internet Archive.
There's torrents, but any torrent you download is pretty trackable.
If you're gonna "find ISOs" you're doing it at your own risk, and the recommended practice is always to have a legit game you've found, and dump it in whichever way you can.
But yeah, any iso file you find that runs as it should on an emulator is good with UWUVCI