Best practice is to override their style sheet using a custom .css file like you described. This way if an update is released, for example a bug fix, then you just replace the foundation.css file.
If you edit the foundation.css file directly and would like to update the framework, then you would need to manually make the updates yourself.