Anyone could contribute very easily by sending ETH to a smart contract.
Companies needed to ensure some contributors were not allowed to buy tokens. KYC at a crowdsale level.
Companies selling securities must ensure some investors are not allowed to buy tokens in the initial issuance and on secondary markets.