it's correct. The things you listed are quite complete. But the fact is that scam projects are also becoming more sophisticated. They will also do most of this list. In the end, the above things are just to limit the scam. Not more
unfortunately now the project scam is also starting to develop their abilities. it's very difficult now to see a project scam by just looking at the team and selling it. there is a project that is almost very perfect and gets bounty participants very much, and finally at the end of the campaign they disappear and don't pay.