They are not legitimate. GreenManGaming, for example, is an authorized seller who gets keys direct from publishers, but sites like G2A do not. G2A has been called out in the past for doing sketchy stuff. Yes, you as the purchaser will likely be fine and get your key and activate successfully...