Yes, it's legit, but please use it carefully. If you do some illegal shit, law enforcement will do everything to correlate and find you because nothing is truly anonymous in the Internet (or anywhere else). Tor Project should do the more visible warning about abusing Tor that they have already written a long time ago: https://support.torproject.org/abuse/#what-about-criminals

Back in the pleistiocene, I used a combo of Orbot and Orweb on my phone just like everyone else. Then I switched to Orfox when that came. Now it's Tor Browser, probably the same thing as Orfox, but I don't know whether it has a built-in Tor bundle since I didn't need to use Tor on mobile for long time.

If you are so afraid, maybe considering using Tor on your computer running Linux (Windows/MacOS are pretty dangerous computing platforms for privacy these days).