Yes. Rather than mandating verification, can we just mandate that there a registry or that websites are legally required to include a particular HTTP header, combined with opt-in infrastructure in place for parents to use?

e.g. You could set up a restricted account on a device with a user birthdate specified. Any requests for websites that return an AGE_REQUIRED header that don’t validate would be rejected.