. Before engaging with a project, check to see if it has a valid team, community and history.
Am sorry to break this bad news to you that a project can have all of this and still be a scam, because most of them are very patient in building a strong community, but once they finally launched the token, they will start issuing one to five dollar as reward, while they themselves has made millions from it, but the community are left with nothing or closer to nothing. So all these you made mentioned doesn't define a good project, because they can still have all these in place and still be a scam.
Any airdrop that asks for private keys, payments or unusual permissions on wallets is most likely a scam.
This is where I totally agree with you, because a good and genuine airdrop wouldn't be asking for such.