XRP itself can be a security while it's controlled by a separate corporation (named Ripple) that itself issues securities. XRP being a security has no connection to utility, read the Howie test again...