I just confirmed that the CP of rented out cards still counts for airdrop points as suggested by @wlatt. Hence, people renting out cards should be safe. :)