He's
absolutely right, in the context in which he was speaking.
In all practicality, most holders of Bitcoin (in terms of numbers of individual holders) use some kind of centralized entity to hold their private key, which is in turn connected to your name, address, social security number, and so on.
In other words, most Bitcoin investors hold Bitcoin in the same way they hold AAPL or MSFT.
That's not in any remote way, "decentralized". Most investors don't even know what a "private key" is, let alone keep it physically on their person.
As I wrote in
the Anon Paradox, most average consumers don't want the kind of "privacy" that means escaping the government, they just want their actions kept from everybody else
but a government with a court-ordered subpoena. For the latter, the only people that actually care about that are those who go against the law where they live, and most people don't want to tangle with their government.
So Bitcoin's decentralized architecture is
not a value to most people who invest in Bitcoin, so it makes sense that most people
don't use it that way.
Today, in practical reality, Bitcoin for most people is an investment in a brand, or an abstract idea, or a name that they know and think will go up in value. They don't know what it means and they don't care.
Yes, the blockchain architecture enables a decentralized ledger, and yes,
technically Bitcoin is decentralized, but that's not the way consumers use it, and that's what somebody like Gary Gensler concerns himself with in his role as SEC chair.