ROM is not sound because there are constructions that are provably secure that cannot be securely instantiated. I do not deny that it is pragmatic or that the problems have not been relevant in practice, but the ROM is just a heuristic.