How can Chainanalysis tell that this is not a "legit" transaction but a mixing service.
The key thing to bear in mind is that everything that Chainanalysis says about transactions occurring is mostly based on their subjective interpretations and arbitrary assumptions, which means it often doesn't have a connection to reality, let alone legal validity. To be certain beyond reasonable doubt that a particular transaction is indeed coming from a mixer, they need to be involved in a mixing process directly, be a part of that transaction. The other transactions in which the blockchain analyst is not a direct participant cannot be viewed as illegal or coming from a particular service.