100% LEGIT!!! They send them from with SR anyways...but even if they didn't.....why would you ever care of they were sent straight to your SR wallet? What I mean is how would you think that is some sort of security threat to YOU?