In my ideal world a law would: 1. Require device manufacturers to allow the device owner (which covers parents of minors' devices) to set policy for the device, including allow/blocklist for apps and sites, and allow/blocklists for content categories. 2. Require browsers to respect the device's policy for site allow/blocklist 3. Require browsers to set a certain header for allow/blocklist of content categories 4. Req…
in reality this cannot be just a simple plain text header. that's way too easily forged and will not satisfy any of the parties pushing for age verification. the "device verifies your age" model means hardware attestation, so the source of that age verification can sign a cryptographically secure promise that the device software has not been modified in a way that would allow this header to be forged.
the app stores might be a less than ideal place to implement age verification, but it lets regulators sidestep all the messy issues around a distinction between device owner and device user.