This case underscores how tokenization, as promising as it is, must contend with complex legal realities