And who is legally responsible for the purchase of tokens?
It's partially the buyers themselves. Individuals who purchase tokens on an illegal, fraudulent or unauthorized basis should be prepared for negative consequences and bear full responsibility in accordance to the laws of their respective countries.