What make NTTs non-transferable?

Could a NTT be made transferable?

Are NTTs “soulbound tokens”?

Why use tokens and not Verifiable Credentials?

Can’t people just make tradable derivatives?