On Non-Transferability, Geofencing, and the Regulatory-Risk Spectrum of Token Distributions