I found a project offering an airdrop but required participants to download and install their mobile app. The app is newly made with only few hundreds download and I don't think I'll ever use it.
Is it too risky?
It is too risky because it may get malware to your devices and it can also get personal information of yours. However, there are airdrop that you need to install app but they are reliable and trustworthy. Before joining airdrop, get a background information about the airdrop manager and the purpose of that coin and other information that will help you to determine whether the airdrop is not risky.