Ethereum ICO‘d and therefore doesn’t pass the Howey test.
If you believe that Ethereum currently represents "an investment of money in a common enterprise with a reasonable expectation of profits to be derived from the efforts of others", then it is a security. If not, then not.
The Howey test would be applied to the status of the asset at the time of the alleged violation of the law that is being prosecuted.
People are going "well they say BTC and ETH are OK, why not this random shitcoin?"
The answer is "ETH wasn't OK when it was still like said random shitcoin".