I think tokenization policies have to be super clear from the beginning and written up in the chain right away. If not, it has to be legally binding governance in a decent country!
I agree, and I invite you to have a look at the smart contracts we just published on our Github for our security token compliant issuance system:
https://github.com/MtPelerin/MtPelerin-protocol