It doesn't have to be perfect - the blocking thing is only a regulatory compliance and PR thing about how they're "protecting" children. As long as the regulators are happy and the PR is working, nobody internally cares or wants to make it 100% bulletproof (also because making it so will increase the support burden helping users who can't use the bulletproof verification flow despite being over 18).