ERC20 is just a token standard on Ethereum. You can issue ERC20 tokens for anything. Some of these will be securities, some won't. It's the use of the tokens that matters, not the protocol/tech behind it.