Why can we not have both? I don't see the assertion backed up at all.

With E2EE and no age verification, there is no way Meta could have any control over messages sent to children, so it does not make sense to hold them responsible.