If it is, I wonder why people still invest whether their time or monies in such projects which have high risk of loss or being scammed.
It's a case to case basis ICO can only become legit if a project that is holding this type of crowdfunding is legit and the developers are worthy of trust but, if the project is unquestionable then the ICO is not going to be legit.
Investors should only support projects that's holding an ICO if they are legit, because you have no way to get your money back in case the developers run away with your money, there are a lot of risk attach to ICO, and it was proven by many failed projects in the past.