Just don`t give anyone your private keys. I would recommend using Ethereum Mist wallet instead of MEW. Also some of these airdrops are real, but then hackers send you an email, pretending to be from an airdrop, but they just trying to get your private keys.
yes you are right