Would receiving spam coins on address potentially pose a risk to my wallet?

Hi all, i know my question might come across as silly but i would like to seek some clarifications on this.

I've noticed lots of nonsensical spams being dropped into my wallet address. I understand that approvals need to be done for contracts to move our cryptos out. But could this be bypassed?

I'm asking this because when using an old address, i found out that it is compromised and have turned into a blackhole address, where my deposited funds are immediately drained to another address. I didn't use that address much other than for it as an airdrop address during the ico boom.