Hey yeah therez a ton of places (well i mean a lot since bytes dont weight too much (do they even weigh at all?) that might be exagerating)
midifarm is one and there a lot that is shared also that is perfectly legal. usually ones with some kind of payload are a bit better. elaborate classic pieces for example just dont come in 10K packages. Well, youll see. Make sure you scan everything btw just to be safe

best to ya