But really, nothing should be doing strong identity verification outside of stuff like government (e.g. passports), or anything that commonly exploits identity for crime (e.g. major financial operations).

FYI the article title (and the name of the law) are both misleading. The law does not require age verification, only age attestation.

Does that make the law even dumber? Probably, lol.