Anybody interested can do the DD and decide for themselves, but I read it as token or exchange... either way if its a security, it needs to be registered or have an exemption with the SEC to be legit. This is why so many ICO launches have been delayed or moved overseas lately.
But that's just my view of it.
"ICOs, or more specifically tokens, can be called a variety of names, but merely calling a token a “utility” token or structuring it to provide some utility does not prevent the token from being a security."