Neither scenario sounds kosher to me. There's some level of justification for other hacked wondercards that isn't present for either of these scenarios.
For the Korean Victini, the Victini event is not legitimately available in Korea, so a Korean Victini is not something that can happen without save shenanigans or AR. If you kept the save in the Japanese version, that issue wouldn't be present. The Arceus item similarly was never available legitimately. Other hacked item events are replicating events that were once legitimately doable, at least.
Basically the issue with your scenarios is that they are not possible without external devices. They aren't even attempting to emulate something that was once legitimately available.