I think as long as you sell PoB through the hive-engine market you are ok, but if you were dong a crowdsale fundraiser and selling directly to people it turns it into a security.

Here's a good link https://cryptolawinsider.com/security-token/