It's probably legal as long as you do all the same accounting/withholding that you would normally do. I suspect some companies are forgetting to do that, just as many people forget to report taxes on crypto.