Issuing ICO:s as investment contracts are unregistered securities, but programmatic selling of the token on secondary exchanges to unsuspecting customers isn't.

The way the shitcoiners get around the laws is to be more obtuse when pumping their token in marketing and let someone else dump it for them.