No, it is not legal and it is unethical and you should contact the state banking commission and report them as soon as you can.  You should not do business with this lender at all.  And call you insurance company and change the info back becusue the present lender will get insurance for you at an additional cost if they are not named as per the loan.  Good luck.