> Still not a security as it's not intended as stake in a business

What matters is if the expectation of profit comes from the efforts of a promoter or third party, not whether the investment is a share of a business.

When Ethereum ICO'ed it definitely met the Howey test for securities criteria. The SEC even stated that.

Where did it say that?