Well they can only read the balance and not steal your money since you haven't given any private keys. That is just to avoid excessive spamming of addresses just to participate in an airdrop.