This is definitely the future: non-governmental entities compete for business, users KYC and self-identify with one or more of them, and they take the legal risk via insurance policies if children slip through. Then third-party sites trust the third-party vendors, who approve users without passing the PII.

Sure, the third-party identity vault companies could be hacked, but I would prefer one of those over a million various sites of dubious quality taking my PII themselves.