Penalties usually come from patterns, not one single link. The safer approach is boring but effective: topical relevance first, then traffic quality, then anchor mix, then pacing.
I would score every prospect before buying or approving it. Look at whether the site has real organic traffic, ranking keywords, niche focus, recent editorial content, and a clean outbound link pattern. DR alone is not enough. Plenty of high DR sites are just selling links across every category.
Pacing matters too. If a small site suddenly gets 40 exact match anchors from unrelated blogs in a month, that looks manufactured. Build links in line with the site’s current authority, content velocity, and brand footprint.
Also avoid obvious spam footprints: same author boxes, same content templates, casino or crypto neighbours, huge “write for us” sections, and posts that exist only to host anchors.
For managed campaigns, tools or agencies like Millenio, your own outreach sheet, or a vetted marketplace should all still have one rule: manually approve anything risky before it goes live. If the placement looks forced to a human, it is probably not worth having.