They are legit and that's another thing why I left them, not only with the high fees but also with poor support. Before they are fine but I don't know why there's a sudden change of customer service. Blocking without any explanation? That is something unethical coming from a well known web wallet.
I have used Xapo before and they are legit in my opinion with the amount of technology improvement that have done on their site. But what made me left them was the high transaction fees which you are not even given the option as to whether to choose a lower fee for longer time and the likes.
I hate that when I've seen that change they had made. Most of it is always a priority transaction and that's why I get back to blockchain.info when I'm trying to make some good transactions, I can adjust with the lowest sats per byte.