ETH was ICO - doesn't work as promised and goes PoS - Vitalik controlled, is even more what a security defines ( Shares = right to min and earn dividends )
It was an ICO, but it's current status is no longer that---what it is known as today is a POW network---therefore is put in the same category as Bitcoin. People may not agree with that but things are as they are.As for Ethereum being Vitalik controlled, maybe, but his influence on what happens is declining as time goes by. Important is that the CFTC doesn't look at Ethereum like that because they continue to call it a decentralized crypto.
Regarding POS, it's not certain yet that it will happen. The CFTC just focuses on how Ethereum runs today, not how it might run in 2020 and after. I don't consider Ethereum a security either. Bitcoin bulls on the other hand do.
https://bitcointalk.org/index.php?topic=428589.0
That's a piece of history there.
I don't really like CFTC's sorting of the coins, I think bitcoin needs to be in its own section, but what you are saying does make sense.