I have a very old Ethereum Address that I have not used in a LONG time. I received a TON of 'Airdrops' and Unverified Tokens and the easiness of having your Coins stolen through signing a Smart Contract always kept me distant from Ethereum and its Tokens. Most Smart Contracts I signed, I did so blindly because who the hell knows how to read a Smart Contract. It is baffling and too risky for my liking.
Block explorers display these tokens in grey color and unverified, signals of likely scam tokens for people who don't know how to read Smart Contract, but have enough carefulness with their money. Risk is there but warning is there too, people who are both careless and greed, will be victims of scammers.
Anyway. One thing I can ensure you is that nobody will make you Rich for free. All the 'Airdropped' Tokens that I own are Scams. I would never trust 'Airdropped' Money. Particularly if the Token I received is a no name.
Airdrop is like a hook for people to join new projects as after receiving airdrop, they will stay with these projects. They can sell airdropped tokens but later most of them will return to buy, for trading or investment and projects want these activities from their airdrop marketing programs.
Airdrop is like carrot and stick, carrot first but stick later and stick contextually means loss.