Regulators took a similar hands-off approach to AirBnB and Uber, despite those companies violating many established laws. Despite the angry Taxi companies and Hotel chains angrily demanding enforcement and a leveling of the playing field. But regulators did nothing. Why? Because, despite their faults, AirBnB and Uber serve a real customer need.
Crypto? Same story. Regulators waited to see if the crypto industry could deliver the promised value to society. If crypto is useful then it can be made to fit within the regulatory framework. If crypto is just a facilitator of fraud and ponzi schemes then harsh regulatory action is justified. Crypto largely has not delivered on its promises, and now the wheels of justice have started grinding.
Delayed enforcement makes innovation possible, especially innovation of the "move fast break things" kind.