For the record, Nix doesn't let you install unfree packages by default either. You have to flip a flag to allow it and you can also supply a predicate to conditionally approve unfree packages (https://nixos.org/manual/nixpkgs/stable/#sec-allow-unfree).