Back when I wrote this story, after the Orlando nightclub shooting, you could buy an AR-15 in a Vermont parking lot with an envelope of cash and no ID. Twenty months later, nothing has changed.