When you are facing the advanced scammers who have been scamming the people throuigh their codes and then you must become more than it. It's quite simple that if anyone should do a lot of audits to the code but these days not so many people are capable to do that.

The scammers have been putting the minting and locked function. That makes the only scammer who will be able to sell or control the tokens.
So many rug pull cases happened in the past. Be careful with any contract that is not yet verified.