> On-device processing: Video selfies for facial age estimation never leave a user’s device. If true, there's little problem with just this from a privacy perspective, but that also makes it useless. Someone is going to make a browser extension to bypass/feed it a fake webcam feed. > Identity documents submitted to our vendor partners are deleted quickly— in most cases, immediately after age confirmation. However if…
This would, most likely, go hand in hand with “Discord is no longer allowed on rooted devices” and “Discord desktop is disallowed from client-side effort”, given the necessity of attestation to make it viable on mobile and the near-total absence of third parties taking advantage of the necessary protections on desktop.
I doubt it'd work here though. You know you can just print out a fake ID and show it to the camera. I doubt the app will be able to tell. Attestation doesn't really change this.
If it truly never leaves your device, you'd also be able to use the same fake ID for your entire friend group.
The cynical and best-case take is they don't actually care, and it's just a gesture to show to authorities to prevent further regulation. In which case they wouldn't try especially hard, which is a good thing.