The area I'm always be security conscious is connecting of wallet address to the website, in the name of claim airdrop rewards which I can't try it and most of the website is dangerous, after I have learned my lesson by connecting my wallet address to a fishing link, and hard for me to participate such airdrop. Once connection of website is not involved, I'm not participating, before you can get rewards is good to participate on airdrop after you have read the rules.