Both are both a bad thing what only spoil ICO is the level at which fake projects are increasing daily just to run with people ethereum and bitcoin. If a project is outstanding and decide to do ICO it's not a crime. But ICD is  risk free you only get the token or coin by doing specific tasks.