“For years, the SEC addressed crypto assets primarily through enforcement actions rather than by issuing specific rules for the industry.”