So your saying they have 3 years to do whatever they want
No. There are plenty of people that actually read SEC filings and since there are specific standards to which they are prepared, incorrect filings are easy to spot and report to the SEC.
Paid OTC disclosure is not considered factual and not reviewed by any regulator. Legitimate companies register with the SEC. Those that aren't don't.
And CFGX doesn't. There are real reasons why CFGX is a no-bid stock.