I found a project offering an airdrop but required participants to download and install their mobile app. The app is newly made with only few hundreds download and I don't think I'll ever use it.
Is it too risky?
It just depends, we need to remember that not all of aps or anything, that "teams" which are looking after coins/ tokens, are scams, sometimes we need to risk something to gain anything, that is how our market is working.