in my opinion, if ICO legit or not depends on the company that runs the ICO itself. but unauthorized ico may seem like ico legit at first. because ICO`s difficult to identify if it is fraud or legitimate but if you only reading their white papers and roadmaps from there token will be great, because with these two information you can easily identify them.