You're right: FINRA doesn't regulate companies; the SEC does. But FINRA doesn't regulate transfer agents, either; the SEC does. They do regulate broker-dealers. But what they've done punishes the company. Not, at this point, anyone else.