Caveat Vendor: Broker-Dealer Liability under the Securities Exchange Act