>If I run an email service and find that a user is running a pump-and-dump scam through it, do you really think I shouldn't be able to shut down their account?

Yeah, I kinda think the SEC should be in charge of whether you're doing a pump-and-dump or not.