SEC called and said your token is a security.
This framework isn't much of a surprise, and is pretty conservative. Not much room for utility tokens, with the exception of perhaps stable utility tokens. Even giving away tokens via bounties or airdrops is a potential sale of securities, footnote 9: "airdrop may constitute a sale or distribution of securities". Does this mean you need to register your token as a security before giving it away via an airdrop?
This makes me miss the days of speculating about what is and isn't a utility token with Token Foundry a year ago... :\