Dmarket just has a regular Ethereum address for collecting investments and so token distribution is not automatic.
Yes, it is a regular airgapped wallet. Yes, token distribution is not done automatically.
Just because, I trust my backend scripts more than "world-wide computer" and I can check transactions before sending funds to a clever hacker, who found a loophole.