It's usually because of airdrops. Some projects make airdrops for active addresses usually. The only risk I could think of is if your address is somehow attached to your identity (maybe you linked it by signing a message or something of that nature) then that could backfire.