You write everything correctly and I want to add what it is also worth paying attention to audits, because recently there are a lot of attacks on treasury projects from these attacks, not all assets are restored after.
Well said! Audit it's one of the most importants factor to do before doing any investing especially DeFi & NFT, We already seen lot of hacked case out there and turn out to be scam since the team itself can't recover the loss, Just always make sure to invest ony any project that already passed External audit like Certik or Techrate.