Is this Normal?

On a serious note, how do you get to that conclusion?

Why else would they do it?

They'd milk the legitimate players more if they let the bosses drop the gear. Since they'd have to cube up their Empress gear to be able to beat Hard Magnus for their Tyrant gear, then cube up their Tyrant gear in order to beat Chaos Root Abyss bosses to get their gear, and then they cube up that gear to prepare for the next boss(es) that'll most likely come in KMS' next Winter update.

But with the Marvel Machine giving them out instead, even a new player can just get to 150 and get the gear from the Marvel Machine and equip it, skipping Empress gear entirely.

KMS can get away with having the first system in place since creating a Nexon Korea account is something that is much more restrictive than creating a Nexon NA account. (KR requires a valid korean ID, but NA just requires a Yahoo mail account which can be made in a minute.) But on GMS, if a hacker gets banned, s/he'll bounce back up and be back in a few days with a new account. Maybe even only one day if s/he knows where to bot. (Plenty of great spots. Most people don't even bother with even half of the game's maps anymore in the age of Evolving World and Dimension Invasion.)