Yeah, I thought as much. So more "social" engineering that possible exploits could makes us loose assets if we're not careful. Did see someone mention that a carefully crafted smart contract could trick the user, sending less assets that what he paid for, so there's that too.
Thanks for sharing. Actually I haven't been in any Airdrop before, but it looks like the current craze right now. I want to join to earn free coins of course, but I didn't know how they works and your post summarized it. If what you are saying is correct then its possible that they can used those emails for marketing ploy in the future or even sell those emails to other company to spam mail. Expect unsolicited emails coming their way.