Part of the problem is that in order to prove your age you need to hand over a bunch of unrelated data about yourself. Why do they need to know my name, address, signature, and what I look like? They don’t even need to know my actual age, just that I’m over 21. Laws like this would go down a lot better if there were privacy-respecting ways of verifying age.
There are privacy-respecting ways, e.g. https://blog.google/products/google-pay/google-wallet-age-id... uses Zero Knowledge Proofs to just verify age without revealing any other personal data. If Online Safety was just a data collection Trojan horse than this kind of approach wouldn’t be allowed.