Great post! An advice is to add the factor of pre-publishing the Eth adress.
As we saw with Sonm and Coindash, scammers are quick and good at tricking the contributors into sending somey to the wrong adress.
This could have been prevented if the team in a safe way, before ico starts, revealed the correct adress.
I invested in santiments ico and they handled it extremely well. One reason for why it went so smoothly was the honest and active communication the team had with the investors.