Legally speaking, it is illegal as:
a) the coins are not in your possession, they are on a ledger in various locations in the internet..
b) the keys or hardwallet are simply an access tool to them and they might not be on you, regardless keys are not the assets

Lastly those old farts have no idea of hownto incorporate old laws into the blockchain reality.