It is legitimate if the company has hired them through a contract with all the job details. Anyone working without proof or a contract is not working on legal grounds, so it will be risky for him as the employer can leave him whenever he wishes.