If the new projects don't introduce anything new and effective in the market, that project will be considered as spam. Because DEV wants fresh money. I'm not sure what whitelisting is, projects operated in most regulated countries will ask for KYC because they do need to show the valid distribution of their tokens to the govt.