Europe is closing the door on offshore crypto, but it’s leaving the riskiest window open