Not keeping peoples data safe is one thing
However, as I have seen in my country Australia under the new social media ban, our Government has mandated social media companies to use age verification technology. As part of this they have mandated that Government ID verification cannot be the only method. As such the social media giants have implemented age verification technology through the type of information you have posted on your account and potentially facial scans.
I struggle to know what else these companies can do if they are mandated to implement age verification. However, they should not be storing Government ID, there should be a broker.