Probably because the transfer of accounts (typically for reasons of better spamming, but in this case for adult access) is possible.

However, that makes me wonder what mechanism might "unverify" an account holder's age upon transfer. I suppose it's simply a need to re-verify (take a new photo) upon every login, but then folks could transfer the session cookie to avoid needing the new owner to perform a login (unless a new device ID/fingerprint makes the old cookie useless).

Since you don't have to verify every time you use the account, transfer of verified accounts will still be a "problem" though. It's just a CYA to be able to say "we verified this account owner."

But… You could transfer the account after age verification too. The only way to be sure is to ask for ID every time people use the website / application, then children will be truly finally safe from the horrors of the Internet.

The website will only function when webcam is turned on with passport next to your face. Session is immeditely revoked on failure.

> You could transfer the account after age verification too.

Isn't that what I said?

Yes, but you also said it's a CYA, when indeed it's not sufficient CYA if only a former account owner, but not "this account owner," had been verified.

> … I suppose it's simply a need to re-verify (take a new photo) upon every login …

Clearly the only foolproof solution is a 3rd-party camera pointed at your face at all times whenever you use a computer.

And a *plug to measure the heart rate at all times in the convenient and unobtrusive way, to ensure the face is of the mammal, and not the mannequin.

A sort of "telescreen" if you will.

SOTA is age inference: The platform studies your behavior to estimate your age.