> It's just the SEC isn't supposed to write law.

And it doesn't write the law, it writes regulation. Which, on this specific subject, it absolutely is supposed to under the law [0] (and if the law didn't specifically authorize the regulations and criminalize violations of them, the regulations wouldn't support criminal prosecution.)

[0] 15 USC § 78j, particularly subsection (b)