I thought the fender tag was normally via screws, but the vin should be via rivets. I'd look closely and compare the vin's stamped on components of the car with the vin plate. It could just be someone didn't have rivets to put it back on during the restoration.
As for legality, I don't know for sure on that, whether it's illegal to have it on with screws or not.