The legislation is literally

> A provider of an age-restricted social media platform must take reasonable steps to prevent age-restricted users having accounts with the age-restricted social media platform.

It doesn’t specifically require them to collect IDs. However it does say the opposite and that the site can only collect government ID or a digital ID information if:

> the provider provides alternative means [not involving IDs] for an individual to assure the provider that the individual is not an age-restricted user; and (b) those means are reasonable in the circumstances.

I’m not going to argue that the legislation is perfect. But it doesn’t actually do what most opponents are accusing it of doing.