Earlier quoted context omitted.
I'm not 100% sure, as I don't work for the SEC and don't have any special insights into this case. But I'll make a guess and say that they probably downplayed the risks in one way or another on their website, compared to statements made to the SEC. Let's say they say "It's risk-free!" on their website while in a statement to the SEC they say "There is a small risk customer lose their funds if X happens".
Quoted post unavailable.
In other words, BlockFi failed to do the bare minimum to run a financial investment service, and are now getting punished for it. That doesn't sound like a overreach to me.
And yeah, in general, laws are usually interpreted subjectively, as laws usually give some wiggle-room to make sure it covers enough ground without having to write 1000 pages about every single edge-case.