“To be sure many would like the rules to go further while some would argue the SEC has no authority in this area to write rules. Neither view is correct.”