Of course it's a security, you have ICO that instantly makes it a security that you are selling right now to people without an available project on hand, then you have pre-mine that is not distributed via PoW making it a double security.
Atm you can even rug anyone on the ICO since the project is not live and not even done.