Coins are just the reflections of the projects. Actually, not all the projects need their coins to be traded, but they are needed for investors and bounty hunters
Yes you are right, in other words tokens are only used as a substitute for contract agreements between shareholders and companies. But the difference is it has no physical form and does not have protection from any institution, so when the company is scam investors cannot do anything.