If you disagree with this analysis, maybe you can show how this is (or is not) different to, say, Axie Infinity (a crypto company even I actually do feel is a security under this test--with centralized servers managing centrally minted NFTs--and which is very similar in nature to Pokémon as it is clearly a rip-off of their IP) or (to take a more standard example) Filecoin (one which the SEC claims is a security in their lawsuit against Coinbase)?
Axie Infinity might run afoul of the Howrey test because of deliberate design decisions in the game which make it nothing like Pokemon: the ability to cash-out in-game currency, and the ability to loan out axies to other players and make money from their in-game efforts. Unlike Pokemon cards, which can be loaned out by players without any involvement from the company printing the cards, loaning out axies and earning money from other players' playing required the active involvement of the company behind the game. Moreover, making money (and especially making money pyramid-style from loaning out your axies to other players) was marketed as the primary selling point for the game for over a year, in contrast to Pokemon and baseball cards where the printing companies have never made claims about the value of the cards or the putative income that could be derived from engaging in a career trading them.
There's no common enterprise for ordinary collectibles. A truly analogous situation would be if pokemon represented a share in the pokemon company where you could participate in the profits derived from pokemon merchandising or something like that.
It fails on points 2 and 4.