Haven't used it myself, but I do know they use your Google Account, OpenID or Facebook connect for login purposes and to ostensibly prevent fake users and potential fraud. Take that information at face-value. No pun intended.
I don't know why it wouldn't be legit, but I'd say Caveat Emptor.