Does the promise of return not make the coin a security ?

Technically it is not because it was a third party indemnity not the team. The team nor dev does not offer such promise. A security must have a promise inherently integrated into the codebase. Besides it is a novel practice being brought into the cryptospace by instantX - the indemnity providers.