t-Zero launch digital security

Can anyone explain (put simply)
How t-zero has managed to launch a SEC complaint digital security … and yet remain custodial?
Must be some serious legal black magic going on here ?