The SEC, which can make civil charges for violations of financial rules, is “not in the exoneration business,” said James Cox, a professor of securities law at Duke University.