This is kind of an excuse though, because I have never seen an implementation of an age gate online that isn't kind of awful. You either make something that is trivial for kids to bypass, or you make something that is invasive, like Youtube's system.

So we get these laws that say, "solve the problem", and there isn't a way to solve the problem. But criticism of the law or criticism of the law's outcomes aren't allowed because the law doesn't technically require that your solution to be terrible. It just asks you to do something that's impossible to do well without violating someone's privacy.

In the US (at least for a while) this was solved by pretending that self-reported ages are an effective way to protect kids. And we pretended that would at least reduce exposure to this kind of content, even though in practice it has basically no impact at all. But if the law doesn't care about effectiveness, then why have the law in the first place? So we raise the standards a bit so that the law has some teeth. But again, nobody has ever in any context demonstrated a working age gate to me online that doesn't involve violating someone's privacy or collecting identifying information about them like a credit card or ID.

So it doesn't actually matter whether or not the law says the solution has to be terrible. The only outcomes that are possible from these laws are either ineffective solutions or invasive solutions. If there is only one method to accomplish an outcome, then requiring the outcome is effectively the same as requiring the method.