I actually am using Coinbase and it is legit. What I love about the app is that whenever you login in, it sends a verification on your email, I know it’s a lot of work but it’s their way of checking if the one signing in is the real user thus avoiding hacked wallets.