Yes bitcoin.org is legit.
BUT, and this is just me talking, I would not trust their recommendations for anything.
A while ago lukejr suffered a hacking event / hack:
https://bitcointalk.org/index.php?topic=5432665.0On the bitcoinknots page that he maintains there WAS actually a warning that the downloads may be compromised. It's not there anymore but for a while it said
This server may be compromised at present. Do not blindly trust downloads - always verify both the SHA256 hash and the OpenPGP signatures match. Luke Dashjr's OpenPGP key is likely to be compromised, so his signatures have been removed and replaced with other developers' signatures. There is no evidence of a tampered download ever having been offered, but if you have downloaded Bitcoin Knots after 2022 December 1st, it is recommended you re-verify the files you previously downloaded to be sure.
At NO TIME did the maintainer of the bitcoin.put up a warning.
1 line of text was all that was needed. But NOPE they didn't.
If they can't do that, then why trust them with other recommendations.
-Dave