The difference is lawmakers have regulated money service businesses and have not regulated cryptography. If they had regulated cryptography, then yes making RSA available to the public could be a crime.
this right here, is the crux of the argument
If they were getting a cut from whenever illegal activities were done.. maybe.
You do know RSA is a company too, right? What are the odds that RSA SecurID has been used by bad actors before?