Personal rights are enough to protect token rights, because all that's required for someone to be secure in their possession of a token is for criminals not to be able to torture them into giving up their decryption key, and practically every country in the world enforces personal rights.

The blockchain secures everything else in a censorship resistant way. Some governments may be able to go to some extreme lengths to control information flows on the internet and stop people from having unrestricted access to the blockchain, but I do not think this will be commonplace, both because there would be significant push back from most populations, and because the government would not want to create an illiberal environment that's unattractive for investment.

As for what keeps token issuers honest: the value of reputation, and the fact that their reputation is at stake. The reason high-ranked eBay sellers deliver the goods they promise is not to avoid being charged with fraud. It's to maintain their 99% positive rating. And eBay has a strong incentive to maintain an honest rating system because they want to maintain their reputation as a trusted market. The world is filled with relationships that consist of iterative interactions, and iteration creates incentives for cooperative behaviour.